CVE-2021-30338

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

Improper input validation in TrustZone memory transfer interface can lead to information disclosure in Snapdragon Compute

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-303395.5Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial ICVE-2021-30345.1An information exposure through log file vulnerability exists in Cortex XSOAR software where the secrets configured for the SAML single signCVE-2021-303407.5Reachable assertion due to improper validation of coreset in PDCCH configuration in SA mode in Snapdragon Auto, Snapdragon Compute, SnapdragCVE-2021-303419.8Improper buffer size validation of DSM packet received can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnCVE-2021-303425.9Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in SnapdrCVE-2021-303435.9Improper integrity check can lead to race condition between tasks PDCP and RRC? after a valid RRC Command packet has been received in SnapdrCVE-2021-303447.5Improper authorization of a replayed LTE security mode command can lead to a denial of service in Snapdragon Auto, Snapdragon Compute, SnapdCVE-2021-303455.5RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, SnapdraCVE-2021-303465.5RPM secure Stream can access any secure resource due to improper SMMU configuration in Snapdragon Industrial IOT, Snapdragon Mobile, SnapdraCVE-2021-303478.1Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in CVE-2021-303486.5Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon ConnCVE-2021-303496.7Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdrag
CVE-2021-30338: Medium severity, CVSS 5.5 | Vulnix