CVE-2021-30304: Qualcomm QCA2062 Firmware

Critical severity, CVSS 9.1. EPSS: 0.6% chance of exploitation in the next 30 days.

Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity

Affected products

  • Qualcomm QCA2062 Firmware: affected versions not specified
  • Qualcomm QCA2064 Firmware: affected versions not specified
  • Qualcomm QCA2065 Firmware: affected versions not specified
  • Qualcomm QCA2066 Firmware: affected versions not specified
  • Qualcomm SC8280XP Firmware: affected versions not specified
  • Qualcomm WCD9380 Firmware: affected versions not specified
  • Qualcomm WCD9385 Firmware: affected versions not specified
  • Qualcomm WCN6850 Firmware: affected versions not specified
  • Qualcomm WCN6851 Firmware: affected versions not specified
  • Qualcomm WCN6855 Firmware: affected versions not specified
  • Qualcomm WCN6856 Firmware: affected versions not specified
  • Qualcomm WSA8830 Firmware: affected versions not specified
  • Qualcomm WSA8835 Firmware: affected versions not specified

Published 2021-10-20. Last modified 2026-06-17.