CVEs-PoC/2021/CVE-2021-30310.md

### [CVE-2021-30310](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30310)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Auto%2C%20Snapdragon%20Connectivity%2C%20Snapdragon%20Consumer%20Electronics%20Connectivity%2C%20Snapdragon%20Consumer%20IOT%2C%20Snapdragon%20Industrial%20IOT%2C%20Snapdragon%20IoT%2C%20Snapdragon%20Mobile%2C%20Snapdragon%20Voice%20%26%20Music&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=APQ8009%2C%20APQ8017%2C%20APQ8053%2C%20APQ8096AU%2C%20CSRB31024%2C%20MDM9206%2C%20MDM9250%2C%20MDM9607%2C%20MDM9626%2C%20MDM9628%2C%20MDM9640%2C%20MDM9650%2C%20MDM9655%2C%20MSM8996AU%2C%20QCA4020%2C%20QCA4531%2C%20QCA6174A%2C%20QCA6175A%2C%20QCA6310%2C%20QCA6320%2C%20QCA6564%2C%20QCA6564A%2C%20QCA6564AU%2C%20QCA6574%2C%20QCA6574A%2C%20QCA6574AU%2C%20QCA6584AU%2C%20QCA6595%2C%20QCA6595AU%2C%20QCA6696%2C%20QCA9367%2C%20QCA9369%2C%20QCA9377%2C%20QCA9379%2C%20QCA9886%2C%20QCM2290%2C%20QCS2290%2C%20SA515M%2C%20SA6145P%2C%20SA6150P%2C%20SA6155%2C%20SA6155P%2C%20SA8145P%2C%20SA8150P%2C%20SA8155%2C%20SA8155P%2C%20SA8195P%2C%20SD210%2C%20SD480%2C%20SD690%205G%2C%20SD750G%2C%20SD765%2C%20SD765G%2C%20SD768G%2C%20SD820%2C%20SD821%2C%20SD845%2C%20SDX20%2C%20SDX20M%2C%20SDX24%2C%20SDX55%2C%20SM7250P%2C%20WCD9326%2C%20WCD9330%2C%20WCD9335%2C%20WCD9340%2C%20WCD9341%2C%20WCD9360%2C%20WCD9370%2C%20WCD9375%2C%20WCD9380%2C%20WCD9385%2C%20WCN3610%2C%20WCN3615%2C%20WCN3660B%2C%20WCN3680B%2C%20WCN3910%2C%20WCN3950%2C%20WCN3988%2C%20WCN3990%2C%20WCN3991%2C%20WCN3998%2C%20WSA8810%2C%20WSA8815%2C%20WSA8830%2C%20WSA8835%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Improper%20Input%20Validation%20in%20WLAN&color=brightgreen)

### Description

Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

### POC

#### Reference
- https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/E7mer/Owfuzz
- https://github.com/alipay/Owfuzz