CVE-2021-30299

MediumCVSS 6.7/10Last modified Jun 17, 2026

Description

Possible out of bound access in audio module due to lack of validation of user provided input.

Metrics

CVSS 3.1 6.7/10CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-20

Affected software

VendorProductVersions
Qualcomm, Inc.SnapdragonAPQ8096AU; AR8031; AR8035; CSRA6620; CSRA6640; MDM9150; QCA6390; QCA6391; QCA6426; QCA6436; QCA6564; QCA6564A; QCA6564AU; QCA6574A; QCA6574AU; QCA6696; QCA8337; QCM2290; QCM4290; QCM6125
qualcommapq8096au_firmware<= *
qualcommar8031_firmware<= *
qualcommar8035_firmware<= *
qualcommcsra6620_firmware<= *
qualcommcsra6640_firmware<= *
qualcommmdm9150_firmware<= *
qualcommqca6390_firmware<= *
qualcommqca6391_firmware<= *
qualcommqca6426_firmware<= *
qualcommqca6436_firmware<= *
qualcommqca6564_firmware<= *
qualcommqca6564a_firmware<= *
qualcommqca6564au_firmware<= *
qualcommqca6574a_firmware<= *
qualcommqca6574au_firmware<= *
qualcommqca6696_firmware<= *
qualcommqca8337_firmware<= *
qualcommqcm2290_firmware<= *
qualcommqcm4290_firmware<= *
qualcommqcm6125_firmware<= *
qualcommqcm6490_firmware<= *
qualcommqcs2290_firmware<= *
qualcommqcs405_firmware<= *
qualcommqcs410_firmware<= *
qualcommqcs4290_firmware<= *
qualcommqcs603_firmware<= *
qualcommqcs605_firmware<= *
qualcommqcs610_firmware<= *
qualcommqcs6125_firmware<= *
qualcommqcs6490_firmware<= *
qualcommqrb5165_firmware<= *
qualcommqrb5165m_firmware<= *
qualcommqrb5165n_firmware<= *
qualcommsa6145p_firmware<= *
qualcommsa6150p_firmware<= *
qualcommsa6155p_firmware<= *
qualcommsa8145p_firmware<= *
qualcommsa8150p_firmware<= *
qualcommsa8155p_firmware<= *
qualcommsa8195p_firmware<= *
qualcommsd205_firmware<= *
qualcommsd210_firmware<= *
qualcommsd480_firmware<= *
qualcommsd765_firmware<= *
qualcommsd765g_firmware<= *
qualcommsd768g_firmware<= *
qualcommsd780g_firmware<= *
qualcommsd865_5g_firmware<= *
qualcommsd870_firmware<= *

References

Timeline

Published
Nov 22, 2024
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2021

CVE-2021-30306.1Cute Editor for ASP.NET 6.4 is vulnerable to reflected cross-site scripting caused by improper validation of the Theme GET parameter in coloCVE-2021-303007.5Possible denial of service due to incorrectly decoding hex data for the SIB2 OTA message and assigning a garbage value to choice when procesCVE-2021-303017.5Possible denial of service due to out of memory while processing RRC and NAS OTA message in Snapdragon Auto, Snapdragon Industrial IOT, SnapCVE-2021-303027.5Improper authentication of EAP WAPI EAPOL frames from unauthenticated user can lead to information disclosure in Snapdragon Compute, SnapdraCVE-2021-303037.8Possible buffer overflow due to lack of buffer length check when segmented WMI command is received in Snapdragon Auto, Snapdragon Compute, SCVE-2021-303049.1Possible buffer out of bound read can occur due to improper validation of TBTT count and length while parsing the beacon response in SnapdraCVE-2021-303057.8Possible out of bound access due to lack of validation of page offset before page is inserted in Snapdragon Auto, Snapdragon Connectivity, SCVE-2021-303067.1Possible buffer over read due to improper buffer allocation for file length passed from user space in Snapdragon Auto, Snapdragon ConnectiviCVE-2021-303077.5Possible denial of service due to improper validation of DNS response when DNS client requests with PTR, NAPTR or SRV query type in SnapdragCVE-2021-303087.8Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, SnapdCVE-2021-303097.8Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon IndustriaCVE-2021-30314.3Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-
CVE-2021-30299: Medium severity, CVSS 6.7 | Vulnix