CVE-2021-30339
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Does this matter?
Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.
Description
Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
- EPSS
- 0.16% probability · 6th percentile
- Public exploits
- None in Exploit-DB
- CISA KEV
- Not listed
- Affected
- qualcomm/ar8035 firmware · qualcomm/qca6391 firmware · qualcomm/qca8081 firmware · qualcomm/qca8337 firmware · qualcomm/qca9984 firmware · qualcomm/qcm2290 firmware · qualcomm/qcm4290 firmware · qualcomm/qcm6490 firmware · qualcomm/qcs2290 firmware · qualcomm/qcs405 firmware · qualcomm/qcs4290 firmware · qualcomm/qcs6490 firmware · qualcomm/sd 8 gen1 5g firmware · qualcomm/sd460 firmware · qualcomm/sd480 firmware · qualcomm/sd662 firmware · qualcomm/sd680 firmware · qualcomm/sd690 5g firmware · qualcomm/sd750g firmware · qualcomm/sd765 firmware · +35 more
- Source
- product-security@qualcomm.com
EPSS 0.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.
References
Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.