CVE-2021-30347

HighCVSS 8.1/10Last modified Jun 17, 2026

Description

Improper integrity check can lead to race condition between tasks PDCP and RRC? right after a valid RRC Command packet has been received in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 8.1/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-367

Affected software

No affected versions have been published.

Timeline

Published: Jun 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-303486.5Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Conn CVE-2021-303496.7Improper access control sequence for AC database after memory allocation can lead to possible memory corruption in Snapdragon Auto, Snapdrag CVE-2021-30357.2An unsafe deserialization vulnerability in Bridgecrew Checkov by Prisma Cloud allows arbitrary code execution when processing a malicious te CVE-2021-303507.8Lack of MBN header size verification against input buffer can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, Snapdragon C CVE-2021-303519.8An out of bound memory access can occur due to improper validation of number of frames being passed during music playback in Snapdragon Auto CVE-2021-303537.5Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Sn CVE-2021-303548.6Amazon Kindle e-reader prior to and including version 5.13.4 contains an Integer Overflow that leads to a Heap-Based Buffer Overflow in func CVE-2021-303558.6Amazon Kindle e-reader prior to and including version 5.13.4 improperly manages privileges, allowing the framework user to elevate privilege CVE-2021-303568.1A denial of service vulnerability was reported in Check Point Identity Agent before R81.018.0000, which could allow low privileged users to CVE-2021-303575.3SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows p CVE-2021-303587.2Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from oth CVE-2021-303597.8The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation.