{"id":"CVE-2021-30298","aliases":["2873209","A-190408641","EUVD-2021-17229","GHSA-3xcc-mw3v-cg8g","PUB-A-190408641"],"status":"published","title":"Possible out of bound access due to improper validation of item size and DIAG memory pools data...","description":"Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.00149,"percentile":0.04161,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-120"],"published":"2021-12-01T00:00:00Z","modified":"2026-11-05T16:32:28Z","fixes":[{"ecosystem":"Android","package":":linux_kernel:Qualcomm","fixed_in":["SoCVersion:2021-12-05"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Android","package":":linux_kernel:Qualcomm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"SoCVersion:0"},{"fixed":"SoCVersion:2021-12-05"}]}],"versions":["SoCVersion"]}],"products":[{"vendor":"qualcomm","product":"ar8031_firmware"},{"vendor":"qualcomm","product":"ar8035_firmware"},{"vendor":"qualcomm","product":"csra6620_firmware"},{"vendor":"qualcomm","product":"csra6640_firmware"},{"vendor":"qualcomm","product":"fsm10055_firmware"},{"vendor":"qualcomm","product":"fsm10056_firmware"},{"vendor":"qualcomm","product":"ipq8072a_firmware"},{"vendor":"qualcomm","product":"ipq8074a_firmware"},{"vendor":"qualcomm","product":"ipq8076a_firmware"},{"vendor":"qualcomm","product":"mdm9150_firmware"},{"vendor":"qualcomm","product":"qca6390_firmware"},{"vendor":"qualcomm","product":"qca6391_firmware"},{"vendor":"qualcomm","product":"qca6574au_firmware"},{"vendor":"qualcomm","product":"qca6595au_firmware"},{"vendor":"qualcomm","product":"qca6696_firmware"},{"vendor":"qualcomm","product":"qca8337_firmware"},{"vendor":"qualcomm","product":"qcn9000_firmware"},{"vendor":"qualcomm","product":"qcn9074_firmware"},{"vendor":"qualcomm","product":"qcs405_firmware"},{"vendor":"qualcomm","product":"qcs410_firmware"},{"vendor":"qualcomm","product":"qcs610_firmware"},{"vendor":"qualcomm","product":"qrb5165_firmware"},{"vendor":"qualcomm","product":"qrb5165n_firmware"},{"vendor":"qualcomm","product":"qualcomm215_firmware"},{"vendor":"qualcomm","product":"sa8155p_firmware"},{"vendor":"qualcomm","product":"sd205_firmware"},{"vendor":"qualcomm","product":"sd210_firmware"},{"vendor":"qualcomm","product":"sd460_firmware"},{"vendor":"qualcomm","product":"sd662_firmware"},{"vendor":"qualcomm","product":"sd665_firmware"},{"vendor":"qualcomm","product":"sd765_firmware"},{"vendor":"qualcomm","product":"sd765g_firmware"},{"vendor":"qualcomm","product":"sd768g_firmware"},{"vendor":"qualcomm","product":"sd865_5g_firmware"},{"vendor":"qualcomm","product":"sd870_firmware"},{"vendor":"qualcomm","product":"sda429w_firmware"},{"vendor":"qualcomm","product":"sdx55_firmware"},{"vendor":"qualcomm","product":"sdx55m_firmware"},{"vendor":"qualcomm","product":"sm7250p_firmware"},{"vendor":"qualcomm","product":"wcd9335_firmware"},{"vendor":"qualcomm","product":"wcd9340_firmware"},{"vendor":"qualcomm","product":"wcd9341_firmware"},{"vendor":"qualcomm","product":"wcd9370_firmware"},{"vendor":"qualcomm","product":"wcd9375_firmware"},{"vendor":"qualcomm","product":"wcd9380_firmware"},{"vendor":"qualcomm","product":"wcd9385_firmware"},{"vendor":"qualcomm","product":"wcn3610_firmware"},{"vendor":"qualcomm","product":"wcn3620_firmware"},{"vendor":"qualcomm","product":"wcn3660b_firmware"},{"vendor":"qualcomm","product":"wcn3950_firmware"},{"vendor":"qualcomm","product":"wcn3980_firmware"},{"vendor":"qualcomm","product":"wcn3988_firmware"},{"vendor":"qualcomm","product":"wcn3991_firmware"},{"vendor":"qualcomm","product":"wcn3998_firmware"},{"vendor":"qualcomm","product":"wcn3999_firmware"},{"vendor":"qualcomm","product":"wcn6850_firmware"},{"vendor":"qualcomm","product":"wcn6851_firmware"},{"vendor":"qualcomm","product":"wsa8810_firmware"},{"vendor":"qualcomm","product":"wsa8815_firmware"},{"vendor":"qualcomm","product":"wsa8830_firmware"},{"vendor":"qualcomm","product":"wsa8835_firmware"},{"vendor":"qualcomm, inc.","product":"snapdragon auto, snapdragon consumer iot, snapdragon industrial iot, snapdragon mobile, snapdragon voice \u0026 music, snapdragon wearables, snapdragon wired infrastructure and networking"}],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-30298"},{"url":"https://github.com/advisories/GHSA-3xcc-mw3v-cg8g"},{"url":"https://source.android.com/security/bulletin/2021-12-01","tags":["advisory"]},{"url":"https://source.codeaurora.org/quic/la/kernel/msm-4.9/commit/?id=5cdb717eb842ab5d4fdde5117d8194571cd3ba86","tags":["fix"]},{"url":"https://source.codeaurora.org/quic/le/kernel/msm-4.19/commit/?id=c59bd17c7f7d51c43844cf3051338ba6cc5db08c","tags":["fix"]}],"sources":{"cve":[{"id":"CVE-2021-30298","description":"Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-01-03T07:26:05Z","modified":"2024-08-03T22:32:40.405Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"updated_at":"2026-11-02T14:33:02.20241Z"}],"euvd":[{"id":"EUVD-2021-17229","description":"Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-01-03T07:26:05Z","modified":"2024-08-03T22:32:40Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T03:24:42.48986Z"}],"ghsa":[{"id":"GHSA-3xcc-mw3v-cg8g","title":"Possible out of bound access due to improper validation of item size and DIAG memory pools data...","description":"Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-01-04T00:00:58Z","modified":"2023-02-03T05:03:54Z","cwes":["CWE-120"],"updated_at":"2026-11-02T14:53:26.852274Z"}],"nvd":[{"id":"CVE-2021-30298","description":"Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice \u0026 Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking","status":"published","published":"2022-01-03T08:15:08.727Z","modified":"2026-06-17T03:50:04.57Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":7.8,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":4.6,"vector":"AV:L/AC:L/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-120"],"updated_at":"2026-11-02T14:07:03.418194Z"}],"osv":[{"id":"PUB-A-190408641","status":"published","published":"2021-12-01T00:00:00Z","modified":"2026-11-10T17:02:23.040266809Z","updated_at":"2026-11-10T17:35:07.907985Z"}]}}