CVE-2021-30336: Qualcomm QCA6390 Firmware

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Possible out of bound read due to lack of domain input validation while processing APK close session request in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Wearables

Affected products

• Qualcomm QCA6390 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA6574 Firmware: affected versions not specified
• Qualcomm QCA6574A Firmware: affected versions not specified
• Qualcomm QCA6574AU Firmware: affected versions not specified
• Qualcomm QCA6595AU Firmware: affected versions not specified
• Qualcomm QCA6696 Firmware: affected versions not specified
• Qualcomm QCM2290 Firmware: affected versions not specified
• Qualcomm QCM4290 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCS2290 Firmware: affected versions not specified
• Qualcomm QCS4290 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm QUALCOMM215 Firmware: affected versions not specified
• Qualcomm SA6145P Firmware: affected versions not specified
• Qualcomm SA6150P Firmware: affected versions not specified
• Qualcomm SA6155 Firmware: affected versions not specified
• Qualcomm SA6155P Firmware: affected versions not specified
• Qualcomm SA8145P Firmware: affected versions not specified
• Qualcomm SA8150P Firmware: affected versions not specified
• Qualcomm SA8155 Firmware: affected versions not specified
• Qualcomm SA8155P Firmware: affected versions not specified
• Qualcomm SA8195P Firmware: affected versions not specified
• Qualcomm SD460 Firmware: affected versions not specified
• Qualcomm SD480 Firmware: affected versions not specified
• and 47 more

Published 2022-01-03. Last modified 2026-06-17.