CVE-2021-30298

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2022-01-03 · updated 2026-06-17
Weakness: CWE-120

Description

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

Qualcomm Ar8031 Firmware: all versions
Qualcomm Ar8035 Firmware: all versions
Qualcomm Csra6620 Firmware: all versions
Qualcomm Csra6640 Firmware: all versions
Qualcomm Fsm10055 Firmware: all versions
Qualcomm Fsm10056 Firmware: all versions
Qualcomm Ipq8072A Firmware: all versions
Qualcomm Ipq8074A Firmware: all versions
Qualcomm Ipq8076A Firmware: all versions
Qualcomm Mdm9150 Firmware: all versions
Qualcomm Qca6390 Firmware: all versions
Qualcomm Qca6391 Firmware: all versions
Qualcomm Qca6574Au Firmware: all versions
Qualcomm Qca6595Au Firmware: all versions
Qualcomm Qca6696 Firmware: all versions
Qualcomm Qca8337 Firmware: all versions
Qualcomm Qcn9000 Firmware: all versions
Qualcomm Qcn9074 Firmware: all versions
Qualcomm Qcs405 Firmware: all versions
Qualcomm Qcs410 Firmware: all versions
Qualcomm Qcs610 Firmware: all versions
Qualcomm Qrb5165 Firmware: all versions
Qualcomm Qrb5165N Firmware: all versions
Qualcomm215 Firmware: all versions
Qualcomm Sa8155P Firmware: all versions
Qualcomm Sd205 Firmware: all versions
Qualcomm Sd210 Firmware: all versions
Qualcomm Sd460 Firmware: all versions
Qualcomm Sd662 Firmware: all versions
Qualcomm Sd665 Firmware: all versions

References

Get alerted when CVE-2021-30298 or the next vulnerability affects your stack