CVE-2021-30331

MEDIUM

Qualcomm AR8035 Firmware - Buffer Overflow via DIAG Interface

Title source: llm
STIX 2.1

Description

Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

References (1)

Core 1
Core References

Scores

CVSS v3 5.5
EPSS 0.0014
EPSS Percentile 3.7%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-120
Status published
Products (50)
qualcomm/ar8035_firmware
qualcomm/fsm10055_firmware
qualcomm/fsm10056_firmware
qualcomm/mdm9150_firmware
qualcomm/mdm9650_firmware
qualcomm/qca6174a_firmware
qualcomm/qca6390_firmware
qualcomm/qca6391_firmware
qualcomm/qca6426_firmware
qualcomm/qca6436_firmware
... and 40 more
Published Apr 01, 2022
Tracked Since Feb 18, 2026