SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-30346

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

MEDIUM 5.5EPSS 0.16%

Does this matter?

Lower severity and a low EPSS score (0.16%). Track it; it rarely justifies an emergency change on its own.

Description

RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CVSS 3.1
5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.16% probability · 5th percentile
Public exploits
None in Exploit-DB
CISA KEV
Not listed
Affected
qualcomm/ar8035 firmware · qualcomm/qca9984 firmware · qualcomm/qcm2290 firmware · qualcomm/qcm4290 firmware · qualcomm/qcs2290 firmware · qualcomm/qcs405 firmware · qualcomm/qcs4290 firmware · qualcomm/sd460 firmware · qualcomm/sd480 firmware · qualcomm/sd662 firmware · qualcomm/sd680 firmware · qualcomm/sm6375 firmware · qualcomm/sw5100 firmware · qualcomm/sw5100p firmware · qualcomm/wcd9370 firmware · qualcomm/wcd9375 firmware · qualcomm/wcd9385 firmware · qualcomm/wcn3910 firmware · qualcomm/wcn3950 firmware · qualcomm/wcn3980 firmware · +8 more
Source
product-security@qualcomm.com
EPSS trend
0%3%5%26 October 2026: 0.16%26 October 202626 October 2026

EPSS 0.2% since 26 October 2026; no change recorded yet. Points are recorded when the score first appears and whenever it moves by a percentage point or more.

Source: NVD record, EPSS from FIRST.org, KEV from CISA, exploits from Exploit-DB. Refreshed daily. Download this record as JSON.