CVE-2021-30294: Null Pointer Dereference
Potential null pointer dereference in KGSL GPU auxiliary command due to improper validation of user input in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2021-09-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-30294?
CVE-2021-30294 has been assigned a medium severity rating due to the potential for null pointer dereference.
How do I fix CVE-2021-30294?
To address CVE-2021-30294, ensure that the software is updated to the latest version provided by Qualcomm that includes the patch.
What are the affected devices for CVE-2021-30294?
CVE-2021-30294 affects devices utilizing Qualcomm Snapdragon components, particularly those with specified firmware versions.
Is CVE-2021-30294 a remote exploit?
CVE-2021-30294 can potentially be exploited locally due to improper validation of user input.
What impact does CVE-2021-30294 have on device functionality?
CVE-2021-30294 may lead to application crashes or degraded system performance due to null pointer dereferences.