High severity8.4NVD Advisory· Published Sep 17, 2021· Updated Jun 17, 2026

CVE-2021-30261

Description

Possible integer and heap overflow due to lack of input command size validation while handling beacon template update command from HLOS in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables

Affected products

Qualcomm/Snapdragon IoTllm-create
Qualcomm/Snapdragon Mobilellm-fuzzy
Qualcomm/Snapdragon Consumer IOTllm-fuzzy
Qualcomm/Snapdragon Industrial IOTllm-fuzzy
Qualcomm/Snapdragon Voice & Musicllm-fuzzy
Qualcomm/Snapdragon Autollm-fuzzy
Qualcomm/Snapdragon Wearablesllm-fuzzy
Qualcomm, Inc./Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearablesv5
Range: APQ8009, APQ8009W, APQ8016, APQ8017, APQ8037, APQ8052, APQ8053, APQ8056, APQ8076, MSM8108, MSM8208, MSM8209, MSM8608, MSM8909W, MSM8917, MSM8920, MSM8937, MSM8940, MSM8952, MSM8953, MSM8956, MSM8976, MSM8976SG, PM8937, QCA1990, QCA4020, QCA6174A, QCA9379, QET4101, QSW8573, Qualcomm215, SD205, SD210, SD429, SD439, SD450, SD632, SDW2500, WCD9306, WCD9326, WCD9330, WCD9335, WCD9340, WCN3610, WCN3615, WCN3620, WCN3660, WCN3660B, WCN3680, WCN3680B, WSA8810, WSA8815

Patches

Vulnerability mechanics

References

www.qualcomm.com/company/product-security/bulletins/august-2021-bulletinnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.546
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000