SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2021-30348

Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT,…

MEDIUM 6.5EPSS 0.23%

Does this matter?

Lower severity and a low EPSS score (0.23%). Track it; it rarely justifies an emergency change on its own.

Description

Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music

CVSS 3.1
6.5 MEDIUMCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.23% probability · 13th percentile
CISA KEV
Not listed
Weakness
CWE-400
Affected
qualcomm/pq8009 firmware · qualcomm/apq8017 firmware · qualcomm/apq8064au firmware · qualcomm/apq8096au firmware · qualcomm/aqt1000 firmware · qualcomm/ar8031 firmware · qualcomm/ar8035 firmware · qualcomm/csra6620 firmware · qualcomm/csra6640 firmware · qualcomm/csrb31024 firmware · qualcomm/mdm9250 firmware · qualcomm/mdm9607 firmware · qualcomm/mdm9628 firmware · qualcomm/mdm9640 firmware · qualcomm/mdm9650 firmware · qualcomm/msm8996au firmware · qualcomm/qca1062 firmware · qualcomm/qca1064 firmware · qualcomm/qca2062 firmware · qualcomm/qca2064 firmware · +40 more
Source
product-security@qualcomm.com

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.