CVE-2021-30299 MEDIUM

CVE-2021-30299: Improper Input Validation in Audio

Vendor Qualcomm, Inc.
Product Snapdragon
Weakness CWE-20 · Input validation
Published November 22, 2024
Last update November 22, 2024
View on NVD All CVEs

CVSS base score

6.7/10
Attack vector Local
Attack complexity Low
Privileges required High
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Possible out of bound access in audio module due to lack of validation of user provided input.

Key dates

02Disclosure timeline

November 22, 2024 CVE published
November 22, 2024 Record updated