NetSight
IP …
medium5.5

CVE-2021-30331

Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connec…

Impact

Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables

Affected products

VendorProductAffected versions
QualcommAr8035 Firmware
All versions
QualcommFsm10055 Firmware
All versions
QualcommFsm10056 Firmware
All versions
QualcommMdm9150 Firmware
All versions
QualcommMdm9650 Firmware
All versions
QualcommQca6174a Firmware
All versions
QualcommQca6390 Firmware
All versions
QualcommQca6391 Firmware
All versions
QualcommQca6426 Firmware
All versions
QualcommQca6436 Firmware
All versions
QualcommQca8081 Firmware
All versions
QualcommQca8337 Firmware
All versions

Weakness classification

CWE-120

References