{"id":"CVE-2021-30331","url":"https://www.cyber-defence.io/tools/cve/CVE-2021-30331","generatedAt":"2026-10-27T23:36:32.143Z","title":"Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon…","description":"Possible buffer overflow due to improper data validation of external commands sent via DIAG interface in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables","published":"2022-04-01T05:15:07.000Z","lastModified":"2026-06-17T03:50:11.000Z","status":"Modified","sourceIdentifier":"product-security@qualcomm.com","cvss":{"version":"3.1","score":5.5,"severity":"MEDIUM","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"},"cwe":["CWE-120"],"affected":["qualcomm/ar8035 firmware","qualcomm/fsm10055 firmware","qualcomm/fsm10056 firmware","qualcomm/mdm9150 firmware","qualcomm/mdm9650 firmware","qualcomm/qca6174a firmware","qualcomm/qca6390 firmware","qualcomm/qca6391 firmware","qualcomm/qca6426 firmware","qualcomm/qca6436 firmware","qualcomm/qca8081 firmware","qualcomm/qca8337 firmware","qualcomm/qca9377 firmware","qualcomm/qcm2290 firmware","qualcomm/qcm4290 firmware","qualcomm/qcm6125 firmware","qualcomm/qcm6490 firmware","qualcomm/qcs2290 firmware","qualcomm/qcs410 firmware","qualcomm/qcs4290 firmware","qualcomm/qcs610 firmware","qualcomm/qcs6125 firmware","qualcomm/qcs6490 firmware","qualcomm/qcx315 firmware","qualcomm/sd 675 firmware","qualcomm/sd 8 gen1 5g firmware","qualcomm/sd460 firmware","qualcomm/sd480 firmware","qualcomm/sd662 firmware","qualcomm/sd665 firmware","qualcomm/sd675 firmware","qualcomm/sd678 firmware","qualcomm/sd690 5g firmware","qualcomm/sd720g firmware","qualcomm/sd730 firmware","qualcomm/sd750g firmware","qualcomm/sd765 firmware","qualcomm/sd765g firmware","qualcomm/sd768g firmware","qualcomm/sd778g firmware","qualcomm/sd865 5g firmware","qualcomm/sd870 firmware","qualcomm/sd888 5g firmware","qualcomm/sdx55 firmware","qualcomm/sdx55m firmware","qualcomm/sdx65 firmware","qualcomm/sdxr2 5g firmware","qualcomm/sm6225 firmware","qualcomm/sm6250 firmware","qualcomm/sm6250p firmware","qualcomm/sm6375 firmware","qualcomm/sm7250p firmware","qualcomm/sm7325p firmware","qualcomm/sw5100 firmware","qualcomm/sw5100p firmware","qualcomm/wcd9335 firmware","qualcomm/wcd9341 firmware","qualcomm/wcd9370 firmware","qualcomm/wcd9375 firmware","qualcomm/wcd9380 firmware"],"epss":{"score":0.00144,"percentile":0.03685,"date":"2026-10-26","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.14%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin","tags":["Vendor Advisory"],"source":"product-security@qualcomm.com"},{"url":"https://www.qualcomm.com/company/product-security/bulletins/march-2022-bulletin","tags":["Vendor Advisory"],"source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2021-30331","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}