CVE-2021-30298: High severity Qualcomm Ar8031 Firmware vulnerability
Possible out of bound access due to improper validation of item size and DIAG memory pools data while switching between USB and PCIE interface in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdragon Wearables, Snapdragon Wired Infrastructure and Networking
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
android/:linux_kernel:Qualcommto a version that resolves this vulnerability.Fixed in SoCVersion:2021-12-05
Event History
Frequently Asked Questions
What is the severity of CVE-2021-30298?
CVE-2021-30298 has a medium severity rating due to the possibility of an out-of-bounds access condition.
How do I fix CVE-2021-30298?
To remediate CVE-2021-30298, users should update to the latest firmware version provided by Qualcomm that addresses this vulnerability.
What devices are affected by CVE-2021-30298?
CVE-2021-30298 affects various Qualcomm firmware across devices in categories such as automotive, IoT, mobile, and wearables.
What are the consequences of CVE-2021-30298?
Exploitation of CVE-2021-30298 could lead to unexpected behavior or system crashes due to improper validation during USB and PCIe switching.
Is there a workaround for CVE-2021-30298?
Currently, no official workaround for CVE-2021-30298 has been provided; the best action is to apply the firmware updates.