CVE-2021-30276

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Improper access control while doing XPU re-configuration dynamically can lead to unauthorized access to a secure resource in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected software

No affected versions have been published.

Timeline

Published: Jan 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-302785.5Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, CVE-2021-302797.8Possible access control violation while setting current permission for VMIDs due to improper permission masking in Snapdragon Compute, Snapd CVE-2021-30289.8git-big-picture before 1.0.0 mishandles ' characters in a branch name, leading to code execution.CVE-2021-302817.8Possible unauthorized access to secure space due to improper check of data allowed while flashing the no access control device configuration CVE-2021-302827.8Possible out of bound write in RAM partition table due to improper validation on number of partitions provided in Snapdragon Auto, Snapdrago CVE-2021-302835.5Possible denial of service due to improper handling of debug register trap from user applications in Snapdragon Consumer IOT, Snapdragon Ind CVE-2021-302849.1Possible information exposure and denial of service due to NAS not dropping messages when integrity check fails in Snapdragon Auto, Snapdrag CVE-2021-302858.8Improper validation of memory region in Hypervisor can lead to incorrect region mapping in Snapdragon Auto, Snapdragon Compute, Snapdragon C CVE-2021-302877.5Possible assertion due to improper validation of symbols configured for PDCCH monitoring in Snapdragon Auto, Snapdragon Compute, Snapdragon CVE-2021-302887.8Possible stack overflow due to improper length check of TLV while copying the TLV to a local stack variable in Snapdragon Auto, Snapdragon C CVE-2021-302897.8Possible buffer overflow due to lack of range check while processing a DIAG command for COEX management in Snapdragon Auto, Snapdragon Compu CVE-2021-30299.8EVOLUCARE ECSIMAGING (aka ECS Imaging) through 6.21.5 has an OS Command Injection vulnerability via shell metacharacters and an IFS manipula