CVE-2021-30339 — Google Android vulnerability

3 documents3 sources
Severity
5.5MEDIUMNVD
EPSS
0.0%
top 88.59%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Android
Timeline
PublishedJun 14
Latest updateJun 15

Description

Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.8 | Impact: 3.6

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-vpff-g924-ggj6: Reading PRNG output may lead to improper key generation due to lack of buffer validation in Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdr↗2022-06-15
▶

📋Vendor Advisories

1
Android
CVE-2021-30339: Closed-source component↗2022-04-01
▶
CVE-2021-30339 — Google Android vulnerability | cvebase