CVE-2021-30257: High severity Google Android vulnerability
Published Oct 4, 2021
·Updated
Possible out of bound read or write in VR service due to lack of validation of DSP selection values in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
Affected Software
155 affected components
Google Android
Qualcomm Apq8017 Firmware
Qualcomm Apq8017
Qualcomm Apq8053 Firmware
Qualcomm Apq8053
Qualcomm Aqt1000 Firmware
Qualcomm Aqt1000
Qualcomm Msm8917 Firmware
Qualcomm MSM8917
Qualcomm Msm8953 Firmware
Qualcomm Msm8953
Qualcomm Qca6390 Firmware
Qualcomm Qca6390
Qualcomm Qca6391 Firmware
Qualcomm Qca6391
Qualcomm Qca6420 Firmware
Qualcomm Qca6420
Qualcomm Qca6426 Firmware
Qualcomm Qca6426
Qualcomm Qca6430 Firmware
Qualcomm Qca6430
Qualcomm Qca6436 Firmware
Qualcomm Qca6436
Qualcomm Qcm2290 Firmware
Qualcomm Qcm2290
Qualcomm Qcm4290 Firmware
Qualcomm Qcm4290
Qualcomm Qcm6125 Firmware
Qualcomm Qcm6125
Qualcomm Qcm6490 Firmware
Qualcomm Qcm6490
Qualcomm Qcs2290 Firmware
Qualcomm Qcs2290
Qualcomm Qcs4290 Firmware
Qualcomm Qcs4290
Qualcomm Qcs605 Firmware
Qualcomm QCS605
Qualcomm Qcs6125 Firmware
Qualcomm Qcs6125
Qualcomm Qcs6490 Firmware
Qualcomm Qcs6490
Qualcomm Qualcomm215 Firmware
Qualcomm Qualcomm215
Qualcomm Sd 636 Firmware
Qualcomm SD 636
Qualcomm Sd 675 Firmware
Qualcomm SD 675
Qualcomm Sd429 Firmware
Qualcomm Sd429
Qualcomm Sd439 Firmware
Qualcomm Sd439
Qualcomm Sd460 Firmware
Qualcomm Sd460
Qualcomm Sd480 Firmware
Qualcomm Sd480
Qualcomm Sd632 Firmware
Qualcomm Sd632
Qualcomm Sd662 Firmware
Qualcomm Sd662
Qualcomm Sd665 Firmware
Qualcomm Sd665
Qualcomm Sd675 Firmware
Qualcomm Sd675
Qualcomm Sd678 Firmware
Qualcomm Sd678
Qualcomm Sd690 5g Firmware
Qualcomm Sd690 5g
Qualcomm Sd720g Firmware
Qualcomm Sd720g
Qualcomm Sd730 Firmware
Qualcomm Sd730
Qualcomm Sd750g Firmware
Qualcomm Sd750g
Qualcomm Sd765 Firmware
Qualcomm Sd765
Qualcomm Sd765g Firmware
Qualcomm Sd765g
Qualcomm Sd768g Firmware
Qualcomm Sd768g
Qualcomm Sd778g Firmware
Qualcomm Sd778g
Qualcomm Sd780g Firmware
Qualcomm Sd780g
Qualcomm Sd855 Firmware
Qualcomm Sd855
Qualcomm Sd865 5g Firmware
Qualcomm Sd865 5g
Qualcomm Sd870 Firmware
Qualcomm Sd870
Qualcomm Sd888 Firmware
Qualcomm Sd888
Qualcomm Sd888 5g Firmware
Qualcomm Sd888 5g
Qualcomm Sdm630 Firmware
Qualcomm SDM630
Qualcomm Sdx50m Firmware
Qualcomm Sdx50m
Qualcomm Sdx55 Firmware
Qualcomm Sdx55
Qualcomm Sdx55m Firmware
Qualcomm Sdx55m
Qualcomm Sdxr1 Firmware
Qualcomm Sdxr1
Qualcomm Sdxr2 5g Firmware
Qualcomm Sdxr2 5g
Qualcomm Sm4125 Firmware
Qualcomm Sm4125
Qualcomm Sm6250 Firmware
Qualcomm Sm6250
Qualcomm Sm7250 Firmware
Qualcomm Sm7250
Qualcomm Sm7325 Firmware
Qualcomm Sm7325
Qualcomm Wcd9370 Firmware
Qualcomm Wcd9370
Qualcomm Wcd9375 Firmware
Qualcomm Wcd9375
Qualcomm Wcd9380 Firmware
Qualcomm Wcd9380
Qualcomm Wcd9385 Firmware
Qualcomm Wcd9385
Qualcomm Wcn3615 Firmware
Qualcomm Wcn3615
Qualcomm Wcn3660b Firmware
Qualcomm Wcn3660b
Qualcomm Wcn3680 Firmware
Qualcomm Wcn3680
Qualcomm Wcn3680b Firmware
Qualcomm Wcn3680b
Qualcomm Wcn3910 Firmware
Qualcomm Wcn3910
Qualcomm Wcn3950 Firmware
Qualcomm Wcn3950
Qualcomm Wcn3988 Firmware
Qualcomm Wcn3988
Qualcomm Wcn3991 Firmware
Qualcomm Wcn3991
Qualcomm Wcn3998 Firmware
Qualcomm Wcn3998
Qualcomm Wcn6740 Firmware
Qualcomm Wcn6740
Qualcomm Wcn6750 Firmware
Qualcomm Wcn6750
Qualcomm Wcn6850 Firmware
Qualcomm Wcn6850
Qualcomm Wcn6851 Firmware
Qualcomm Wcn6851
Qualcomm Wcn6855 Firmware
Qualcomm WCN6855
Qualcomm Wcn6856 Firmware
Qualcomm Wcn6856
Qualcomm Wsa8830 Firmware
Qualcomm Wsa8830
Qualcomm Wsa8835 Firmware
Qualcomm Wsa8835
Event History
Oct 4, 2021
CVE Published
via Android·12:00 AM
Data Sourced
via Android·12:00 AM
SeverityAffected Software
Oct 20, 2021
CVE Published
via MITRE·06:31 AM
Data Sourced
via MITRE·06:31 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2021-30257?
CVE-2021-30257 is classified as a high severity vulnerability.
2
How do I fix CVE-2021-30257?
To address CVE-2021-30257, users should update their affected Qualcomm firmware to the latest version that includes the security patches.
3
What systems are affected by CVE-2021-30257?
CVE-2021-30257 affects various Qualcomm Snapdragon firmware and devices running certain versions of Android.
4
What can happen if CVE-2021-30257 is exploited?
Exploitation of CVE-2021-30257 could lead to out-of-bounds read or write operations, potentially allowing attackers to access sensitive data or execute arbitrary code.
5
Who is responsible for fixing CVE-2021-30257?
The responsibility for fixing CVE-2021-30257 lies with the device manufacturers and Qualcomm, requiring them to release updated firmware and security patches.