CVE-2021-30298: Qualcomm AR8031 Firmware

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking

Affected products

  • Qualcomm AR8031 Firmware: affected versions not specified
  • Qualcomm AR8035 Firmware: affected versions not specified
  • Qualcomm CSRA6620 Firmware: affected versions not specified
  • Qualcomm CSRA6640 Firmware: affected versions not specified
  • Qualcomm FSM10055 Firmware: affected versions not specified
  • Qualcomm FSM10056 Firmware: affected versions not specified
  • Qualcomm IPQ8072A Firmware: affected versions not specified
  • Qualcomm IPQ8074A Firmware: affected versions not specified
  • Qualcomm IPQ8076A Firmware: affected versions not specified
  • Qualcomm MDM9150 Firmware: affected versions not specified
  • Qualcomm QCA6390 Firmware: affected versions not specified
  • Qualcomm QCA6391 Firmware: affected versions not specified
  • Qualcomm QCA6574AU Firmware: affected versions not specified
  • Qualcomm QCA6595AU Firmware: affected versions not specified
  • Qualcomm QCA6696 Firmware: affected versions not specified
  • Qualcomm QCA8337 Firmware: affected versions not specified
  • Qualcomm QCN9000 Firmware: affected versions not specified
  • Qualcomm QCN9074 Firmware: affected versions not specified
  • Qualcomm QCS405 Firmware: affected versions not specified
  • Qualcomm QCS410 Firmware: affected versions not specified
  • Qualcomm QCS610 Firmware: affected versions not specified
  • Qualcomm QRB5165 Firmware: affected versions not specified
  • Qualcomm QRB5165N Firmware: affected versions not specified
  • Qualcomm QUALCOMM215 Firmware: affected versions not specified
  • Qualcomm SA8155P Firmware: affected versions not specified
  • and 36 more

Published 2022-01-03. Last modified 2026-06-17.