CVE-2021-30310: Qualcomm APQ8009 Firmware

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

Affected products

• Qualcomm APQ8009 Firmware: affected versions not specified
• Qualcomm APQ8017 Firmware: affected versions not specified
• Qualcomm APQ8053 Firmware: affected versions not specified
• Qualcomm APQ8096AU Firmware: affected versions not specified
• Qualcomm CSRB31024 Firmware: affected versions not specified
• Qualcomm MDM9206 Firmware: affected versions not specified
• Qualcomm MDM9250 Firmware: affected versions not specified
• Qualcomm MDM9607 Firmware: affected versions not specified
• Qualcomm MDM9626 Firmware: affected versions not specified
• Qualcomm MDM9628 Firmware: affected versions not specified
• Qualcomm MDM9640 Firmware: affected versions not specified
• Qualcomm MDM9650 Firmware: affected versions not specified
• Qualcomm MDM9655 Firmware: affected versions not specified
• Qualcomm MSM8996AU Firmware: affected versions not specified
• Qualcomm QCA4020 Firmware: affected versions not specified
• Qualcomm QCA4531 Firmware: affected versions not specified
• Qualcomm QCA6174A Firmware: affected versions not specified
• Qualcomm QCA6175A Firmware: affected versions not specified
• Qualcomm QCA6310 Firmware: affected versions not specified
• Qualcomm QCA6320 Firmware: affected versions not specified
• Qualcomm QCA6564 Firmware: affected versions not specified
• Qualcomm QCA6564A Firmware: affected versions not specified
• Qualcomm QCA6564AU Firmware: affected versions not specified
• Qualcomm QCA6574 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• and 61 more

Published 2021-10-20. Last modified 2026-06-17.