Vulnerability Name:

CVE-2021-30298 (CCN-216497)

Assigned:2021-12-06
Published:2021-12-06
Updated:2022-01-12
Summary:Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
CVSS v3 Severity:7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H)
6.8 Medium (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): Low
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
6.7 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H)
5.8 Medium (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C)
Exploitability Metrics:Attack Vector (AV): Local
Attack Complexity (AC): Low
Privileges Required (PR): High
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): High
Integrity (I): High
Availibility (A): High
CVSS v2 Severity:4.6 Medium (CVSS v2 Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)
Exploitability Metrics:Access Vector (AV): Local
Access Complexity (AC): Low
Athentication (Au): Single_Instance
Impact Metrics:Confidentiality (C): Complete
Integrity (I): Complete
Availibility (A): Complete
Vulnerability Type:CWE-120
Vulnerability Consequences:Gain Access
References:Source: MITRE
Type: CNA
CVE-2021-30298

Source: XF
Type: UNKNOWN
qualcomm-cve202130298-bo(216497)

Source: CCN
Type: Qualcomm Web site
December 2021 Security Bulletin

Source: CONFIRM
Type: Patch, Vendor Advisory
https://www.qualcomm.com/company/product-security/bulletins/december-2021-bulletin

Vulnerable Configuration:Configuration 1:
  • cpe:/o:qualcomm:ar8031_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:ar8031:-:*:*:*:*:*:*:*

    • Configuration 2:
  • cpe:/o:qualcomm:ar8035_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:ar8035:-:*:*:*:*:*:*:*

    • Configuration 3:
  • cpe:/o:qualcomm:csra6620_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:csra6620:-:*:*:*:*:*:*:*

    • Configuration 4:
  • cpe:/o:qualcomm:csra6640_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:csra6640:-:*:*:*:*:*:*:*

    • Configuration 5:
  • cpe:/o:qualcomm:fsm10055_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:fsm10055:-:*:*:*:*:*:*:*

    • Configuration 6:
  • cpe:/o:qualcomm:fsm10056_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:fsm10056:-:*:*:*:*:*:*:*

    • Configuration 7:
  • cpe:/o:qualcomm:ipq8072a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:ipq8072a:-:*:*:*:*:*:*:*

    • Configuration 8:
  • cpe:/o:qualcomm:ipq8074a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:ipq8074a:-:*:*:*:*:*:*:*

    • Configuration 9:
  • cpe:/o:qualcomm:ipq8076a_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:ipq8076a:-:*:*:*:*:*:*:*

    • Configuration 10:
  • cpe:/o:qualcomm:mdm9150_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:mdm9150:-:*:*:*:*:*:*:*

    • Configuration 11:
  • cpe:/o:qualcomm:qca6390_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6390:-:*:*:*:*:*:*:*

    • Configuration 12:
  • cpe:/o:qualcomm:qca6391_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6391:-:*:*:*:*:*:*:*

    • Configuration 13:
  • cpe:/o:qualcomm:qca6574au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6574au:-:*:*:*:*:*:*:*

    • Configuration 14:
  • cpe:/o:qualcomm:qca6595au_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6595au:-:*:*:*:*:*:*:*

    • Configuration 15:
  • cpe:/o:qualcomm:qca6696_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca6696:-:*:*:*:*:*:*:*

    • Configuration 16:
  • cpe:/o:qualcomm:qca8337_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qca8337:-:*:*:*:*:*:*:*

    • Configuration 17:
  • cpe:/o:qualcomm:qcn9000_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcn9000:-:*:*:*:*:*:*:*

    • Configuration 18:
  • cpe:/o:qualcomm:qcn9074_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcn9074:-:*:*:*:*:*:*:*

    • Configuration 19:
  • cpe:/o:qualcomm:qcs405_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs405:-:*:*:*:*:*:*:*

    • Configuration 20:
  • cpe:/o:qualcomm:qcs410_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs410:-:*:*:*:*:*:*:*

    • Configuration 21:
  • cpe:/o:qualcomm:qcs610_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qcs610:-:*:*:*:*:*:*:*

    • Configuration 22:
  • cpe:/o:qualcomm:qrb5165_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qrb5165:-:*:*:*:*:*:*:*

    • Configuration 23:
  • cpe:/o:qualcomm:qrb5165n_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qrb5165n:-:*:*:*:*:*:*:*

    • Configuration 24:
  • cpe:/o:qualcomm:qualcomm215_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:qualcomm215:-:*:*:*:*:*:*:*

    • Configuration 25:
  • cpe:/o:qualcomm:sa8155p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sa8155p:-:*:*:*:*:*:*:*

    • Configuration 26:
  • cpe:/o:qualcomm:sd205_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd205:-:*:*:*:*:*:*:*

    • Configuration 27:
  • cpe:/o:qualcomm:sd210_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd210:-:*:*:*:*:*:*:*

    • Configuration 28:
  • cpe:/o:qualcomm:sd460_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd460:-:*:*:*:*:*:*:*

    • Configuration 29:
  • cpe:/o:qualcomm:sd662_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd662:-:*:*:*:*:*:*:*

    • Configuration 30:
  • cpe:/o:qualcomm:sd665_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd665:-:*:*:*:*:*:*:*

    • Configuration 31:
  • cpe:/o:qualcomm:sd765_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd765:-:*:*:*:*:*:*:*

    • Configuration 32:
  • cpe:/o:qualcomm:sd765g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd765g:-:*:*:*:*:*:*:*

    • Configuration 33:
  • cpe:/o:qualcomm:sd768g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd768g:-:*:*:*:*:*:*:*

    • Configuration 34:
  • cpe:/o:qualcomm:sd865_5g_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd865_5g:-:*:*:*:*:*:*:*

    • Configuration 35:
  • cpe:/o:qualcomm:sd870_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sd870:-:*:*:*:*:*:*:*

    • Configuration 36:
  • cpe:/o:qualcomm:sda429w_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sda429w:-:*:*:*:*:*:*:*

    • Configuration 37:
  • cpe:/o:qualcomm:sdx55_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55:-:*:*:*:*:*:*:*

    • Configuration 38:
  • cpe:/o:qualcomm:sdx55m_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sdx55m:-:*:*:*:*:*:*:*

    • Configuration 39:
  • cpe:/o:qualcomm:sm7250p_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:sm7250p:-:*:*:*:*:*:*:*

    • Configuration 40:
  • cpe:/o:qualcomm:wcd9335_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9335:-:*:*:*:*:*:*:*

    • Configuration 41:
  • cpe:/o:qualcomm:wcd9340_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9340:-:*:*:*:*:*:*:*

    • Configuration 42:
  • cpe:/o:qualcomm:wcd9341_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9341:-:*:*:*:*:*:*:*

    • Configuration 43:
  • cpe:/o:qualcomm:wcd9370_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9370:-:*:*:*:*:*:*:*

    • Configuration 44:
  • cpe:/o:qualcomm:wcd9375_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9375:-:*:*:*:*:*:*:*

    • Configuration 45:
  • cpe:/o:qualcomm:wcd9380_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9380:-:*:*:*:*:*:*:*

    • Configuration 46:
  • cpe:/o:qualcomm:wcd9385_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcd9385:-:*:*:*:*:*:*:*

    • Configuration 47:
  • cpe:/o:qualcomm:wcn3610_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3610:-:*:*:*:*:*:*:*

    • Configuration 48:
  • cpe:/o:qualcomm:wcn3620_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3620:-:*:*:*:*:*:*:*

    • Configuration 49:
  • cpe:/o:qualcomm:wcn3660b_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3660b:-:*:*:*:*:*:*:*

    • Configuration 50:
  • cpe:/o:qualcomm:wcn3950_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3950:-:*:*:*:*:*:*:*

    • Configuration 51:
  • cpe:/o:qualcomm:wcn3980_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3980:-:*:*:*:*:*:*:*

    • Configuration 52:
  • cpe:/o:qualcomm:wcn3988_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3988:-:*:*:*:*:*:*:*

    • Configuration 53:
  • cpe:/o:qualcomm:wcn3991_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3991:-:*:*:*:*:*:*:*

    • Configuration 54:
  • cpe:/o:qualcomm:wcn3998_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3998:-:*:*:*:*:*:*:*

    • Configuration 55:
  • cpe:/o:qualcomm:wcn3999_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn3999:-:*:*:*:*:*:*:*

    • Configuration 56:
  • cpe:/o:qualcomm:wcn6850_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6850:-:*:*:*:*:*:*:*

    • Configuration 57:
  • cpe:/o:qualcomm:wcn6851_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wcn6851:-:*:*:*:*:*:*:*

    • Configuration 58:
  • cpe:/o:qualcomm:wsa8810_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8810:-:*:*:*:*:*:*:*

    • Configuration 59:
  • cpe:/o:qualcomm:wsa8815_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8815:-:*:*:*:*:*:*:*

    • Configuration 60:
  • cpe:/o:qualcomm:wsa8830_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8830:-:*:*:*:*:*:*:*

    • Configuration 61:
  • cpe:/o:qualcomm:wsa8835_firmware:-:*:*:*:*:*:*:*
  • AND
  • cpe:/h:qualcomm:wsa8835:-:*:*:*:*:*:*:*

    • Configuration CCN 1:
  • cpe:/h:qualcomm:snapdragon_mobile:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_auto:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_consumer_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_industrial_internet_of_things:-:*:*:*:*:*:*:*
  • OR cpe:/h:qualcomm:snapdragon_voice_&_music:-:*:*:*:*:*:*:*
  • OR cpe:/o:qualcomm:snapdragon_wired_infrastructure_&_networking:-:*:*:*:*:*:*:*
  • OR cpe:/o:qualcomm:snapdragon_wearables:-:*:*:*:*:*:*:*

    • * Denotes that component is vulnerable
    BACK
    qualcomm ar8031 firmware -
    qualcomm ar8031 -
    qualcomm ar8035 firmware -
    qualcomm ar8035 -
    qualcomm csra6620 firmware -
    qualcomm csra6620 -
    qualcomm csra6640 firmware -
    qualcomm csra6640 -
    qualcomm fsm10055 firmware -
    qualcomm fsm10055 -
    qualcomm fsm10056 firmware -
    qualcomm fsm10056 -
    qualcomm ipq8072a firmware -
    qualcomm ipq8072a -
    qualcomm ipq8074a firmware -
    qualcomm ipq8074a -
    qualcomm ipq8076a firmware -
    qualcomm ipq8076a -
    qualcomm mdm9150 firmware -
    qualcomm mdm9150 -
    qualcomm qca6390 firmware -
    qualcomm qca6390 -
    qualcomm qca6391 firmware -
    qualcomm qca6391 -
    qualcomm qca6574au firmware -
    qualcomm qca6574au -
    qualcomm qca6595au firmware -
    qualcomm qca6595au -
    qualcomm qca6696 firmware -
    qualcomm qca6696 -
    qualcomm qca8337 firmware -
    qualcomm qca8337 -
    qualcomm qcn9000 firmware -
    qualcomm qcn9000 -
    qualcomm qcn9074 firmware -
    qualcomm qcn9074 -
    qualcomm qcs405 firmware -
    qualcomm qcs405 -
    qualcomm qcs410 firmware -
    qualcomm qcs410 -
    qualcomm qcs610 firmware -
    qualcomm qcs610 -
    qualcomm qrb5165 firmware -
    qualcomm qrb5165 -
    qualcomm qrb5165n firmware -
    qualcomm qrb5165n -
    qualcomm qualcomm215 firmware -
    qualcomm qualcomm215 -
    qualcomm sa8155p firmware -
    qualcomm sa8155p -
    qualcomm sd205 firmware -
    qualcomm sd205 -
    qualcomm sd210 firmware -
    qualcomm sd210 -
    qualcomm sd460 firmware -
    qualcomm sd460 -
    qualcomm sd662 firmware -
    qualcomm sd662 -
    qualcomm sd665 firmware -
    qualcomm sd665 -
    qualcomm sd765 firmware -
    qualcomm sd765 -
    qualcomm sd765g firmware -
    qualcomm sd765g -
    qualcomm sd768g firmware -
    qualcomm sd768g -
    qualcomm sd865 5g firmware -
    qualcomm sd865 5g -
    qualcomm sd870 firmware -
    qualcomm sd870 -
    qualcomm sda429w firmware -
    qualcomm sda429w -
    qualcomm sdx55 firmware -
    qualcomm sdx55 -
    qualcomm sdx55m firmware -
    qualcomm sdx55m -
    qualcomm sm7250p firmware -
    qualcomm sm7250p -
    qualcomm wcd9335 firmware -
    qualcomm wcd9335 -
    qualcomm wcd9340 firmware -
    qualcomm wcd9340 -
    qualcomm wcd9341 firmware -
    qualcomm wcd9341 -
    qualcomm wcd9370 firmware -
    qualcomm wcd9370 -
    qualcomm wcd9375 firmware -
    qualcomm wcd9375 -
    qualcomm wcd9380 firmware -
    qualcomm wcd9380 -
    qualcomm wcd9385 firmware -
    qualcomm wcd9385 -
    qualcomm wcn3610 firmware -
    qualcomm wcn3610 -
    qualcomm wcn3620 firmware -
    qualcomm wcn3620 -
    qualcomm wcn3660b firmware -
    qualcomm wcn3660b -
    qualcomm wcn3950 firmware -
    qualcomm wcn3950 -
    qualcomm wcn3980 firmware -
    qualcomm wcn3980 -
    qualcomm wcn3988 firmware -
    qualcomm wcn3988 -
    qualcomm wcn3991 firmware -
    qualcomm wcn3991 -
    qualcomm wcn3998 firmware -
    qualcomm wcn3998 -
    qualcomm wcn3999 firmware -
    qualcomm wcn3999 -
    qualcomm wcn6850 firmware -
    qualcomm wcn6850 -
    qualcomm wcn6851 firmware -
    qualcomm wcn6851 -
    qualcomm wsa8810 firmware -
    qualcomm wsa8810 -
    qualcomm wsa8815 firmware -
    qualcomm wsa8815 -
    qualcomm wsa8830 firmware -
    qualcomm wsa8830 -
    qualcomm wsa8835 firmware -
    qualcomm wsa8835 -
    qualcomm snapdragon mobile -
    qualcomm snapdragon auto -
    qualcomm snapdragon consumer internet of things -
    qualcomm snapdragon industrial internet of things -
    qualcomm snapdragon voice & music -
    qualcomm snapdragon wired infrastructure & networking -
    qualcomm snapdragon wearables -