CVE-2021-30321
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in...
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
- Record
CVE-2021-30321- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-02
EUVDEUVD-2021-17252
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
- Record
EUVD-2021-17252- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v269-87cf-4phhNo score
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in...
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
- Record
GHSA-v269-87cf-4phh- Weakness
- CWE-120
- Updated
- 2026-11-02
NVD
Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity
- Record
CVE-2021-30321- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon compute, snapdragon connectivity, snapdragon consumer electronics connectivity
- qualcomm aqt1000 firmware
- qualcomm qca1062 firmware
- qualcomm qca1064 firmware
- qualcomm qca2066 firmware
- qualcomm qca6320 firmware
- qualcomm qca6391 firmware
- qualcomm qca6420 firmware
- qualcomm qca6430 firmware
- qualcomm sc8280xp firmware
- qualcomm sd 8cx firmware
- qualcomm wcd9340 firmware
Show 12 moreShow less
- qualcomm wcd9341 firmware
- qualcomm wcd9380 firmware
- qualcomm wcd9385 firmware
- qualcomm wcn3998 firmware
- qualcomm wcn6850 firmware
- qualcomm wcn6851 firmware
- qualcomm wcn6855 firmware
- qualcomm wcn6856 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8835 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-30321 is a critical vulnerability (CVSS 9.8) in Qualcomm, Inc. Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, published November 12, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.78%, the 56th percentile. No source names a fixed version.