CVE-2021-30299

MEDIUM
Published Nov 22, 2024 Modified Nov 25, 2024 CWE-20

Description

Possible out of bound access in audio module due to lack of validation of user provided input.

Is your site exposed to CVE-2021-30299?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.7
MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness Type (CWE)

CWE-20 Improper Input Validation

Affected Products

Vendor Product
qualcomm wsa8835_firmware
qualcomm wsa8835
qualcomm wsa8830_firmware
qualcomm wsa8830
qualcomm wsa8815_firmware
qualcomm wsa8815
qualcomm wsa8810_firmware
qualcomm wsa8810
qualcomm wcn6856_firmware
qualcomm wcn6856
qualcomm wcn6855_firmware
qualcomm wcn6855
qualcomm wcn6851_firmware
qualcomm wcn6851
qualcomm wcn6850_firmware
qualcomm wcn6850
qualcomm wcn6750_firmware
qualcomm wcn6750
qualcomm wcn6740_firmware
qualcomm wcn6740
qualcomm wcn3998_firmware
qualcomm wcn3998
qualcomm wcn3991_firmware
qualcomm wcn3991
qualcomm wcn3990_firmware
qualcomm wcn3990
qualcomm wcn3988_firmware
qualcomm wcn3988
qualcomm wcn3980_firmware
qualcomm wcn3980
qualcomm wcn3950_firmware
qualcomm wcn3950
qualcomm wcn3910_firmware
qualcomm wcn3910
qualcomm wcn3660b_firmware
qualcomm wcn3660b
qualcomm wcn3620_firmware
qualcomm wcn3620
qualcomm wcn3610_firmware
qualcomm wcn3610
qualcomm wcd9385_firmware
qualcomm wcd9385
qualcomm wcd9380_firmware
qualcomm wcd9380
qualcomm wcd9375_firmware
qualcomm wcd9375
qualcomm wcd9370_firmware
qualcomm wcd9370
qualcomm wcd9341_firmware
qualcomm wcd9341
qualcomm wcd9340_firmware
qualcomm wcd9340
qualcomm wcd9335_firmware
qualcomm wcd9335
qualcomm sm7250p_firmware
qualcomm sm7250p
qualcomm sm6375_firmware
qualcomm sm6375
qualcomm sm6225_firmware
qualcomm sm6225
qualcomm sdxr2_5g_firmware
qualcomm sdxr2_5g
qualcomm sdx55m_firmware
qualcomm sdx55m
qualcomm sdx55_firmware
qualcomm sdx55
qualcomm sda429w_firmware
qualcomm sda429w
qualcomm sd888_5g_firmware
qualcomm sd888_5g
qualcomm sd870_firmware
qualcomm sd870
qualcomm sd865_5g_firmware
qualcomm sd865_5g
qualcomm sd780g_firmware
qualcomm sd780g
qualcomm sd768g_firmware
qualcomm sd768g
qualcomm sd765g_firmware
qualcomm sd765g
qualcomm sd765_firmware
qualcomm sd765
qualcomm sd480_firmware
qualcomm sd480
qualcomm sd210_firmware
qualcomm sd210
qualcomm sd205_firmware
qualcomm sd205
qualcomm sa8195p_firmware
qualcomm sa8195p
qualcomm sa8155p_firmware
qualcomm sa8155p
qualcomm sa8150p_firmware
qualcomm sa8150p
qualcomm sa8145p_firmware
qualcomm sa8145p
qualcomm sa6155p_firmware
qualcomm sa6155p
qualcomm sa6150p_firmware
qualcomm sa6150p
qualcomm sa6145p_firmware
qualcomm sa6145p
qualcomm qrb5165n_firmware
qualcomm qrb5165n
qualcomm qrb5165m_firmware
qualcomm qrb5165m
qualcomm qrb5165_firmware
qualcomm qrb5165
qualcomm qcs6490_firmware
qualcomm qcs6490
qualcomm qcs6125_firmware
qualcomm qcs6125
qualcomm qcs610_firmware
qualcomm qcs610
qualcomm qcs605_firmware
qualcomm qcs605
qualcomm qcs603_firmware
qualcomm qcs603
qualcomm qcs4290_firmware
qualcomm qcs4290
qualcomm qcs410_firmware
qualcomm qcs410
qualcomm qcs405_firmware
qualcomm qcs405
qualcomm qcs2290_firmware
qualcomm qcs2290
qualcomm qcm6490_firmware
qualcomm qcm6490
qualcomm qcm6125_firmware
qualcomm qcm6125
qualcomm qcm4290_firmware
qualcomm qcm4290
qualcomm qcm2290_firmware
qualcomm qcm2290
qualcomm qca8337_firmware
qualcomm qca8337
qualcomm qca6696_firmware
qualcomm qca6696
qualcomm qca6574au_firmware
qualcomm qca6574au
qualcomm qca6574a_firmware
qualcomm qca6574a
qualcomm qca6564au_firmware
qualcomm qca6564au
qualcomm qca6564a_firmware
qualcomm qca6564a
qualcomm qca6564_firmware
qualcomm qca6564
qualcomm qca6436_firmware
qualcomm qca6436
qualcomm qca6426_firmware
qualcomm qca6426
qualcomm qca6391_firmware
qualcomm qca6391
qualcomm qca6390_firmware
qualcomm qca6390
qualcomm mdm9150_firmware
qualcomm mdm9150
qualcomm csra6640_firmware
qualcomm csra6640
qualcomm csra6620_firmware
qualcomm csra6620
qualcomm ar8035_firmware
qualcomm ar8035
qualcomm ar8031_firmware
qualcomm ar8031
qualcomm apq8096au_firmware
qualcomm apq8096au

References

Frequently Asked Questions

What is CVE-2021-30299? +
Possible out of bound access in audio module due to lack of validation of user provided input. It has a CVSS v3.1 base score of 6.7 (MEDIUM).
How severe is CVE-2021-30299? +
CVE-2021-30299 has a CVSS v3.1 score of 6.7 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2021-30299? +
CVE-2021-30299 affects products from qualcomm, specifically: apq8096au, apq8096au_firmware, ar8031, ar8031_firmware, ar8035, ar8035_firmware, csra6620, csra6620_firmware, csra6640, csra6640_firmware, mdm9150, mdm9150_firmware, qca6390, qca6390_firmware, qca6391, qca6391_firmware, qca6426, qca6426_firmware, qca6436, qca6436_firmware, qca6564, qca6564_firmware, qca6564a, qca6564a_firmware, qca6564au, qca6564au_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6696, qca6696_firmware, qca8337, qca8337_firmware, qcm2290, qcm2290_firmware, qcm4290, qcm4290_firmware, qcm6125, qcm6125_firmware, qcm6490, qcm6490_firmware, qcs2290, qcs2290_firmware, qcs405, qcs405_firmware, qcs410, qcs410_firmware, qcs4290, qcs4290_firmware, qcs603, qcs603_firmware, qcs605, qcs605_firmware, qcs610, qcs610_firmware, qcs6125, qcs6125_firmware, qcs6490, qcs6490_firmware, qrb5165, qrb5165_firmware, qrb5165m, qrb5165m_firmware, qrb5165n, qrb5165n_firmware, sa6145p, sa6145p_firmware, sa6150p, sa6150p_firmware, sa6155p, sa6155p_firmware, sa8145p, sa8145p_firmware, sa8150p, sa8150p_firmware, sa8155p, sa8155p_firmware, sa8195p, sa8195p_firmware, sd205, sd205_firmware, sd210, sd210_firmware, sd480, sd480_firmware, sd765, sd765_firmware, sd765g, sd765g_firmware, sd768g, sd768g_firmware, sd780g, sd780g_firmware, sd865_5g, sd865_5g_firmware, sd870, sd870_firmware, sd888_5g, sd888_5g_firmware, sda429w, sda429w_firmware, sdx55, sdx55_firmware, sdx55m, sdx55m_firmware, sdxr2_5g, sdxr2_5g_firmware, sm6225, sm6225_firmware, sm6375, sm6375_firmware, sm7250p, sm7250p_firmware, wcd9335, wcd9335_firmware, wcd9340, wcd9340_firmware, wcd9341, wcd9341_firmware, wcd9370, wcd9370_firmware, wcd9375, wcd9375_firmware, wcd9380, wcd9380_firmware, wcd9385, wcd9385_firmware, wcn3610, wcn3610_firmware, wcn3620, wcn3620_firmware, wcn3660b, wcn3660b_firmware, wcn3910, wcn3910_firmware, wcn3950, wcn3950_firmware, wcn3980, wcn3980_firmware, wcn3988, wcn3988_firmware, wcn3990, wcn3990_firmware, wcn3991, wcn3991_firmware, wcn3998, wcn3998_firmware, wcn6740, wcn6740_firmware, wcn6750, wcn6750_firmware, wcn6850, wcn6850_firmware, wcn6851, wcn6851_firmware, wcn6855, wcn6855_firmware, wcn6856, wcn6856_firmware, wsa8810, wsa8810_firmware, wsa8815, wsa8815_firmware, wsa8830, wsa8830_firmware, wsa8835, wsa8835_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2021-30299? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2021-30299 — free, no signup required.