CVE-2021-30308

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Possible buffer overflow while printing the HARQ memory partition detail due to improper validation of buffer size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-120

Affected software

No affected versions have been published.

Timeline

Published
Jan 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2021

CVE-2021-303097.8Improper size validation of QXDM commands can lead to memory corruption in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon IndustriaCVE-2021-30314.3Padding bytes in Ethernet packets on PA-200, PA-220, PA-500, PA-800, PA-2000 Series, PA-3000 Series, PA-3200 Series, PA-5200 Series, and PA-CVE-2021-303107.5Possible buffer overflow due to Improper validation of received CF-ACK and CF-Poll data frames in Snapdragon Auto, Snapdragon Connectivity, CVE-2021-303117.8Possible heap overflow due to lack of index validation before allocating and writing to heap buffer in Snapdragon Auto, Snapdragon Compute, CVE-2021-303127.5Improper authentication of sub-frames of a multicast AMSDU frame can lead to information disclosure in Snapdragon Auto, Snapdragon Compute, CVE-2021-303136.4Use after free condition can occur in wired connectivity due to a race condition while creating and deleting folders in Snapdragon Auto, SnaCVE-2021-303145.5Lack of validation for third party application accessing the service can lead to information disclosure in Snapdragon Auto, Snapdragon CompuCVE-2021-303157.8Improper handling of sensor HAL structure in absence of sensor can lead to use after free in Snapdragon AutoCVE-2021-303167.8Possible out of bound memory access due to improper boundary check while creating HSYNC fence in Snapdragon Auto, Snapdragon Connectivity, SCVE-2021-303177.8Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute,CVE-2021-303187.8Improper validation of input when provisioning the HDCP key can lead to memory corruption in Snapdragon Auto, Snapdragon Compute, SnapdragonCVE-2021-303197.8Possible integer overflow due to improper validation of command length parameters while processing WMI command in Snapdragon Auto, Snapdrago
CVE-2021-30308: High severity, CVSS 7.8 | Vulnix