CVE-2021-30309: Qualcomm MDM9650 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Affected products

  • Qualcomm MDM9650 Firmware: affected versions not specified
  • Qualcomm QCA6174A Firmware: affected versions not specified
  • Qualcomm QCA6390 Firmware: affected versions not specified
  • Qualcomm QCA6391 Firmware: affected versions not specified
  • Qualcomm QCA9377 Firmware: affected versions not specified
  • Qualcomm QCM6125 Firmware: affected versions not specified
  • Qualcomm QCS410 Firmware: affected versions not specified
  • Qualcomm QCS603 Firmware: affected versions not specified
  • Qualcomm QCS605 Firmware: affected versions not specified
  • Qualcomm QCS610 Firmware: affected versions not specified
  • Qualcomm QCS6125 Firmware: affected versions not specified
  • Qualcomm SD660 Firmware: affected versions not specified
  • Qualcomm SD665 Firmware: affected versions not specified
  • Qualcomm SD690 5g Firmware: affected versions not specified
  • Qualcomm SD730 Firmware: affected versions not specified
  • Qualcomm SD765 Firmware: affected versions not specified
  • Qualcomm SD765G Firmware: affected versions not specified
  • Qualcomm SD768G Firmware: affected versions not specified
  • Qualcomm SD865 5g Firmware: affected versions not specified
  • Qualcomm SD870 Firmware: affected versions not specified
  • Qualcomm SDX12 Firmware: affected versions not specified
  • Qualcomm SDX55M Firmware: affected versions not specified
  • Qualcomm SDXR1 Firmware: affected versions not specified
  • Qualcomm SM7250P Firmware: affected versions not specified
  • Qualcomm WCD9326 Firmware: affected versions not specified
  • and 18 more

Published 2022-02-11. Last modified 2026-06-17.