CVE-2021-30312

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-287

Affected software

No affected versions have been published.

Timeline

Published
Oct 20, 2021
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-303136.4Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, SnaCVE-2021-303145.5Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon CompuCVE-2021-303157.8Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon AutoCVE-2021-303167.8Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, SCVE-2021-303177.8Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute,CVE-2021-303187.8Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2021-303197.8Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, SnapdragoCVE-2021-30324.4An information exposure through log file vulnerability exists in Palo Alto Networks PAN-OS software where configuration secrets for the “httCVE-2021-303219.8Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Compute, Snapdragon Connectivity, SCVE-2021-303227.8Possible out of bounds write due to improper validation of number of GPIOs configured in an internal parameters array in Snapdragon Auto, SnCVE-2021-303237.8Improper validation of maximum size of data write to EFS file can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, SnapdragCVE-2021-303246.7Possible out of bound write due to lack of boundary check for the maximum size of buffer when sending a DCI packet to remote process in Snap
CVE-2021-30312: High severity, CVSS 7.5 | Vulnix