CVE-2021-30346
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon...
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Attack profile
How easy it is to exploit
- Attack vector
- Local
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- Record
CVE-2021-30346- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-02
EUVDEUVD-2021-17277
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- Record
EUVD-2021-17277- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6frx-xq63-r4jc
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon...
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- Record
GHSA-6frx-xq63-r4jc- CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-668
- Updated
- 2026-11-02
NVD
RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
- Record
CVE-2021-30346- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N - CVSS 3.1
- 5.5 Medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - CVSS 2.0
- 4.9 Medium
AV:L/AC:L/Au:N/C:C/I:N/A:N - Updated
- 2026-11-02
Affected products
- qualcomm, inc. snapdragon industrial iot, snapdragon mobile, snapdragon wearables, snapdragon wired infrastructure and networking
- qualcomm ar8035 firmware
- qualcomm qca9984 firmware
- qualcomm qcm2290 firmware
- qualcomm qcm4290 firmware
- qualcomm qcs2290 firmware
- qualcomm qcs405 firmware
- qualcomm qcs4290 firmware
- qualcomm sd460 firmware
- qualcomm sd480 firmware
- qualcomm sd662 firmware
- qualcomm sd680 firmware
Show 17 moreShow less
- qualcomm sm6375 firmware
- qualcomm sw5100 firmware
- qualcomm sw5100p firmware
- qualcomm wcd9370 firmware
- qualcomm wcd9375 firmware
- qualcomm wcd9385 firmware
- qualcomm wcn3910 firmware
- qualcomm wcn3950 firmware
- qualcomm wcn3980 firmware
- qualcomm wcn3988 firmware
- qualcomm wcn3991 firmware
- qualcomm wcn3998 firmware
- qualcomm wcn3999 firmware
- qualcomm wsa8810 firmware
- qualcomm wsa8815 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8835 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-30346 is a medium vulnerability (CVSS 6.5) in Qualcomm, Inc. Snapdragon Industrial Iot, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure And Networking, published June 14, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.16%, the 5th percentile. No source names a fixed version.