CVE-2021-30307: High severity Google Android vulnerability
Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-30307?
CVE-2021-30307 is classified with a severity level of high due to its potential to cause denial of service.
How do I fix CVE-2021-30307?
To fix CVE-2021-30307, ensure that your firmware for the affected Qualcomm devices is updated to the latest version provided by the manufacturer.
What devices are affected by CVE-2021-30307?
CVE-2021-30307 impacts various Qualcomm firmware across Snapdragon Auto, Compute, Connectivity, as well as Consumer and Industrial IoT devices.
What types of DNS queries are involved in CVE-2021-30307?
CVE-2021-30307 involves improper validation of DNS responses specifically for PTR, NAPTR, or SRV query types.
Can CVE-2021-30307 be exploited remotely?
Yes, CVE-2021-30307 can potentially be exploited remotely if a malicious actor sends specially crafted DNS queries.