CVE-2021-30337

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possible use after free when process shell memory is freed using IOCTL call and process initialization is in progress in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-416

Affected software

No affected versions have been published.

Timeline

Published
Jan 3, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-303385.5Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon ComputeCVE-2021-303395.5Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial ICVE-2021-30345.1An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single signCVE-2021-303407.5Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, SnapdragCVE-2021-303419.8Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnCVE-2021-303425.9Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in SnapdrCVE-2021-303435.9Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in SnapdrCVE-2021-303447.5Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2021-303455.5RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, SnapdraCVE-2021-303465.5RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, SnapdraCVE-2021-303478.1Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in CVE-2021-303486.5Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn