---
cve: "CVE-2021-30275"
severity: "CRITICAL"
cvss: 9.3
epss: "0.2%"
vendor: "Qualcomm, Inc."
kev: false
exploited: false
published: "2022-01-03 08:15:08"
tags: [cve, security, critical]
source: tsecurity.de CVE-Dossier
exported: "2026-10-24T20:57:39+02:00"
---

# CVE-2021-30275

> 9.3 CRITICAL

## Beschreibung

Possible integer overflow in page alignment interface due to lack of address and size validation before alignment in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wired Infrastructure and Networking

## CNA-Record (Kanon, cvelistV5)

- CNA: **qualcomm**
- State: PUBLISHED
- Stand: 2024-08-03 22:24:59
- CNA-CVSS: **9.3** (`CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H`)

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Keine | bad |
| UI Interaktion | Keine | bad |
| S Scope | Verändert | bad |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/sicherheitsluecken/cve-2021-30275/) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI WID (CSAF)_