CVE-2021-30315
HIGHCVSS 7.8/10EPSS 0.15%
Last modified
CVE-2021-30315 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto. EPSS estimates a 0.15% chance of exploitation in the next 30 days.
Description
Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Qualcomm | Mdm9628 Firmware | All versions |
| Qualcomm | Qca6564a Firmware | All versions |
| Qualcomm | Qca6564au Firmware | All versions |
| Qualcomm | Qca6574 Firmware | All versions |
| Qualcomm | Qca6574a Firmware | All versions |
| Qualcomm | Qca6574au Firmware | All versions |
| Qualcomm | Qca6595 Firmware | All versions |
| Qualcomm | Qca6595au Firmware | All versions |
| Qualcomm | Qca6696 Firmware | All versions |
| Qualcomm | Sa6155 Firmware | All versions |
| Qualcomm | Sa6155p Firmware | All versions |
| Qualcomm | Sa8150p Firmware | All versions |
| Qualcomm | Sa8155 Firmware | All versions |
| Qualcomm | Sa8155p Firmware | All versions |
| Qualcomm | Sa8195p Firmware | All versions |
References
- https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletinPatch, Vendor Advisory
- https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletinPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-30315?
Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon Auto
How severe is CVE-2021-30315?
CVE-2021-30315 has a CVSS score of 7.8/10 (HIGH severity). The EPSS model estimates a 0.15% probability of exploitation in the next 30 days.
How do I fix CVE-2021-30315?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-3031Padding bytes in Ethernet packets on PA-200, PA-220, PA-500,…4.3
- CVE-2021-30310Possible buffer overflow due to Improper validation of recei…7.5
- CVE-2021-30311Possible heap overflow due to lack of index validation befor…7.8
- CVE-2021-30312Improper authentication of sub-frames of a multicast AMSDU f…7.5
- CVE-2021-30313Use after free condition can occur in wired connectivity due…6.4
- CVE-2021-30314Lack of validation for third party application accessing the…5.5
- CVE-2021-30316Possible out of bound memory access due to improper boundary…7.8
- CVE-2021-30317Improper validation of program headers containing ELF metada…7.8
- CVE-2021-30318Improper validation of input when provisioning the HDCP key …7.8
- CVE-2021-30319Possible integer overflow due to improper validation of comm…7.8
- CVE-2021-3032An information exposure through log file vulnerability exist…4.4
- CVE-2021-30321Possible buffer overflow due to lack of parameter length che…9.8
Are you affected by CVE-2021-30315?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST