CVE-2021-30305: Input Validation
Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2021-10-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-30305?
CVE-2021-30305 has a severity rating that indicates a potential risk for exploitation but may vary depending on specific implementations.
How do I fix CVE-2021-30305?
To fix CVE-2021-30305, apply the recommended updates or patches provided by Qualcomm for the affected firmware.
Which products are affected by CVE-2021-30305?
CVE-2021-30305 affects various Qualcomm firmware products, including qca6174a, qca6391, and qca6574, among others.
What type of vulnerability is CVE-2021-30305?
CVE-2021-30305 is classified as an out-of-bounds access issue due to insufficient validation of page offsets.
Can CVE-2021-30305 lead to data loss?
Exploitation of CVE-2021-30305 could potentially lead to data loss or system instability, depending on how an attacker leverages the vulnerability.