CVE-2021-30339: Qualcomm AR8035 Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

• Qualcomm AR8035 Firmware: affected versions not specified
• Qualcomm QCA6391 Firmware: affected versions not specified
• Qualcomm QCA8081 Firmware: affected versions not specified
• Qualcomm QCA8337 Firmware: affected versions not specified
• Qualcomm QCA9984 Firmware: affected versions not specified
• Qualcomm QCM2290 Firmware: affected versions not specified
• Qualcomm QCM4290 Firmware: affected versions not specified
• Qualcomm QCM6490 Firmware: affected versions not specified
• Qualcomm QCS2290 Firmware: affected versions not specified
• Qualcomm QCS405 Firmware: affected versions not specified
• Qualcomm QCS4290 Firmware: affected versions not specified
• Qualcomm QCS6490 Firmware: affected versions not specified
• Qualcomm SD460 Firmware: affected versions not specified
• Qualcomm SD480 Firmware: affected versions not specified
• Qualcomm SD662 Firmware: affected versions not specified
• Qualcomm SD680 Firmware: affected versions not specified
• Qualcomm SD690 5g Firmware: affected versions not specified
• Qualcomm SD750G Firmware: affected versions not specified
• Qualcomm SD765 Firmware: affected versions not specified
• Qualcomm SD765G Firmware: affected versions not specified
• Qualcomm SD768G Firmware: affected versions not specified
• Qualcomm SD778G Firmware: affected versions not specified
• Qualcomm SD780G Firmware: affected versions not specified
• Qualcomm SD888 5g Firmware: affected versions not specified
• Qualcomm SD888 Firmware: affected versions not specified
• and 30 more

Published 2022-06-14. Last modified 2026-06-17.