Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electro...
Date: 2022-01
Affected: qualcomm/pq8009_firmware, qualcomm/pq8009, qualcomm/apq8017_firmware, qualcomm/apq8017
Attack vector: dos
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2021-30348
CWE: CWE-400
CVSS: 6.5 (CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)

Improper validation of LLM utility timers availability can lead to denial of service in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music


Mitigations:

Architectural layers (MAESTRO):