Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2021-30353: Qualcomm Snapdragon firmware may crash from pointer validation

CVE-2021-30353 · published 4 years ago

Summary

The audio and networking firmware used in Snapdragon devices can mishandle a function call, causing the software to stop unexpectedly. This affects several Qualcomm firmware packages, including audio and various network controller files. Apply the latest firmware updates from the vendor to fix the issue.

What to do

Update google platform/hardware/qcom/audio to version SoCVersion:2022-01-05.

Affected software

Ecosystem	Vendor	Product	Affected versions
Android	google	platform/hardware/qcom/audio	>= SoCVersion:0, < SoCVersion:2022-01-05 Fix: upgrade to SoCVersion:2022-01-05
–	qualcomm	ar8031_firmware	All versions `cpe:2.3:o:qualcomm:ar8031_firmware:-:::::::*`
–	qualcomm	ar8035_firmware	All versions `cpe:2.3:o:qualcomm:ar8035_firmware:-:::::::*`
–	qualcomm	csra6620_firmware	All versions `cpe:2.3:o:qualcomm:csra6620_firmware:-:::::::*`
–	qualcomm	csra6640_firmware	All versions `cpe:2.3:o:qualcomm:csra6640_firmware:-:::::::*`
–	qualcomm	fsm10055_firmware	All versions `cpe:2.3:o:qualcomm:fsm10055_firmware:-:::::::*`
–	qualcomm	fsm10056_firmware	All versions `cpe:2.3:o:qualcomm:fsm10056_firmware:-:::::::*`
–	qualcomm	mdm9150_firmware	All versions `cpe:2.3:o:qualcomm:mdm9150_firmware:-:::::::*`
–	qualcomm	msm8996au_firmware	All versions `cpe:2.3:o:qualcomm:msm8996au_firmware:-:::::::*`
–	qualcomm	qca6174a_firmware	All versions `cpe:2.3:o:qualcomm:qca6174a_firmware:-:::::::*`
–	qualcomm	qca6390_firmware	All versions `cpe:2.3:o:qualcomm:qca6390_firmware:-:::::::*`
–	qualcomm	qca6391_firmware	All versions `cpe:2.3:o:qualcomm:qca6391_firmware:-:::::::*`
–	qualcomm	qca6426_firmware	All versions `cpe:2.3:o:qualcomm:qca6426_firmware:-:::::::*`
–	qualcomm	qca6436_firmware	All versions `cpe:2.3:o:qualcomm:qca6436_firmware:-:::::::*`
–	qualcomm	qca6564_firmware	All versions `cpe:2.3:o:qualcomm:qca6564_firmware:-:::::::*`
–	qualcomm	qca6564a_firmware	All versions `cpe:2.3:o:qualcomm:qca6564a_firmware:-:::::::*`
–	qualcomm	qca6564au_firmware	All versions `cpe:2.3:o:qualcomm:qca6564au_firmware:-:::::::*`
–	qualcomm	qca6574_firmware	All versions `cpe:2.3:o:qualcomm:qca6574_firmware:-:::::::*`
–	qualcomm	qca6574a_firmware	All versions `cpe:2.3:o:qualcomm:qca6574a_firmware:-:::::::*`
–	qualcomm	qca6574au_firmware	All versions `cpe:2.3:o:qualcomm:qca6574au_firmware:-:::::::*`
–	qualcomm	qca6584au_firmware	All versions `cpe:2.3:o:qualcomm:qca6584au_firmware:-:::::::*`
–	qualcomm	qca6595au_firmware	All versions `cpe:2.3:o:qualcomm:qca6595au_firmware:-:::::::*`
–	qualcomm	qca6696_firmware	All versions `cpe:2.3:o:qualcomm:qca6696_firmware:-:::::::*`
–	qualcomm	qca8081_firmware	All versions `cpe:2.3:o:qualcomm:qca8081_firmware:-:::::::*`
–	qualcomm	qca8337_firmware	All versions `cpe:2.3:o:qualcomm:qca8337_firmware:-:::::::*`
–	qualcomm	qca9377_firmware	All versions `cpe:2.3:o:qualcomm:qca9377_firmware:-:::::::*`
–	qualcomm	qcm2290_firmware	All versions `cpe:2.3:o:qualcomm:qcm2290_firmware:-:::::::*`
–	qualcomm	qcm4290_firmware	All versions `cpe:2.3:o:qualcomm:qcm4290_firmware:-:::::::*`
–	qualcomm	qcm6490_firmware	All versions `cpe:2.3:o:qualcomm:qcm6490_firmware:-:::::::*`
–	qualcomm	qcs2290_firmware	All versions `cpe:2.3:o:qualcomm:qcs2290_firmware:-:::::::*`
–	qualcomm	qcs405_firmware	All versions `cpe:2.3:o:qualcomm:qcs405_firmware:-:::::::*`
–	qualcomm	qcs410_firmware	All versions `cpe:2.3:o:qualcomm:qcs410_firmware:-:::::::*`
–	qualcomm	qcs4290_firmware	All versions `cpe:2.3:o:qualcomm:qcs4290_firmware:-:::::::*`
–	qualcomm	qcs603_firmware	All versions `cpe:2.3:o:qualcomm:qcs603_firmware:-:::::::*`
–	qualcomm	qcs605_firmware	All versions `cpe:2.3:o:qualcomm:qcs605_firmware:-:::::::*`
–	qualcomm	qcs610_firmware	All versions `cpe:2.3:o:qualcomm:qcs610_firmware:-:::::::*`
–	qualcomm	qcs6490_firmware	All versions `cpe:2.3:o:qualcomm:qcs6490_firmware:-:::::::*`
–	qualcomm	qcx315_firmware	All versions `cpe:2.3:o:qualcomm:qcx315_firmware:-:::::::*`
–	qualcomm	qrb5165_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165_firmware:-:::::::*`
–	qualcomm	qrb5165n_firmware	All versions `cpe:2.3:o:qualcomm:qrb5165n_firmware:-:::::::*`
–	qualcomm	qsm8250_firmware	All versions `cpe:2.3:o:qualcomm:qsm8250_firmware:-:::::::*`
–	qualcomm	sa415m_firmware	All versions `cpe:2.3:o:qualcomm:sa415m_firmware:-:::::::*`
–	qualcomm	sa515m_firmware	All versions `cpe:2.3:o:qualcomm:sa515m_firmware:-:::::::*`
–	qualcomm	sa6145p_firmware	All versions `cpe:2.3:o:qualcomm:sa6145p_firmware:-:::::::*`
–	qualcomm	sa6150p_firmware	All versions `cpe:2.3:o:qualcomm:sa6150p_firmware:-:::::::*`
–	qualcomm	sa6155_firmware	All versions `cpe:2.3:o:qualcomm:sa6155_firmware:-:::::::*`
–	qualcomm	sa6155p_firmware	All versions `cpe:2.3:o:qualcomm:sa6155p_firmware:-:::::::*`
–	qualcomm	sa8145p_firmware	All versions `cpe:2.3:o:qualcomm:sa8145p_firmware:-:::::::*`
–	qualcomm	sa8150p_firmware	All versions `cpe:2.3:o:qualcomm:sa8150p_firmware:-:::::::*`
–	qualcomm	sa8155_firmware	All versions `cpe:2.3:o:qualcomm:sa8155_firmware:-:::::::*`

Showing 50 of 111. Show the rest

Ecosystem	Vendor	Product	Affected versions
–	qualcomm	sa8155p_firmware	All versions `cpe:2.3:o:qualcomm:sa8155p_firmware:-:::::::*`
–	qualcomm	sa8195p_firmware	All versions `cpe:2.3:o:qualcomm:sa8195p_firmware:-:::::::*`
–	qualcomm	sd_675_firmware	All versions `cpe:2.3:o:qualcomm:sd_675_firmware:-:::::::*`
–	qualcomm	sd_8_gen1_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd_8_gen1_5g_firmware:-:::::::*`
–	qualcomm	sd205_firmware	All versions `cpe:2.3:o:qualcomm:sd205_firmware:-:::::::*`
–	qualcomm	sd210_firmware	All versions `cpe:2.3:o:qualcomm:sd210_firmware:-:::::::*`
–	qualcomm	sd460_firmware	All versions `cpe:2.3:o:qualcomm:sd460_firmware:-:::::::*`
–	qualcomm	sd480_firmware	All versions `cpe:2.3:o:qualcomm:sd480_firmware:-:::::::*`
–	qualcomm	sd662_firmware	All versions `cpe:2.3:o:qualcomm:sd662_firmware:-:::::::*`
–	qualcomm	sd665_firmware	All versions `cpe:2.3:o:qualcomm:sd665_firmware:-:::::::*`
–	qualcomm	sd675_firmware	All versions `cpe:2.3:o:qualcomm:sd675_firmware:-:::::::*`
–	qualcomm	sd678_firmware	All versions `cpe:2.3:o:qualcomm:sd678_firmware:-:::::::*`
–	qualcomm	sd690_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd690_5g_firmware:-:::::::*`
–	qualcomm	sd720g_firmware	All versions `cpe:2.3:o:qualcomm:sd720g_firmware:-:::::::*`
–	qualcomm	sd730_firmware	All versions `cpe:2.3:o:qualcomm:sd730_firmware:-:::::::*`
–	qualcomm	sd750g_firmware	All versions `cpe:2.3:o:qualcomm:sd750g_firmware:-:::::::*`
–	qualcomm	sd765_firmware	All versions `cpe:2.3:o:qualcomm:sd765_firmware:-:::::::*`
–	qualcomm	sd765g_firmware	All versions `cpe:2.3:o:qualcomm:sd765g_firmware:-:::::::*`
–	qualcomm	sd768g_firmware	All versions `cpe:2.3:o:qualcomm:sd768g_firmware:-:::::::*`
–	qualcomm	sd778g_firmware	All versions `cpe:2.3:o:qualcomm:sd778g_firmware:-:::::::*`
–	qualcomm	sd780g_firmware	All versions `cpe:2.3:o:qualcomm:sd780g_firmware:-:::::::*`
–	qualcomm	sd865_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd865_5g_firmware:-:::::::*`
–	qualcomm	sd870_firmware	All versions `cpe:2.3:o:qualcomm:sd870_firmware:-:::::::*`
–	qualcomm	sd888_firmware	All versions `cpe:2.3:o:qualcomm:sd888_firmware:-:::::::*`
–	qualcomm	sd888_5g_firmware	All versions `cpe:2.3:o:qualcomm:sd888_5g_firmware:-:::::::*`
–	qualcomm	sda429w_firmware	All versions `cpe:2.3:o:qualcomm:sda429w_firmware:-:::::::*`
–	qualcomm	sdm429w_firmware	All versions `cpe:2.3:o:qualcomm:sdm429w_firmware:-:::::::*`
–	qualcomm	sdx12_firmware	All versions `cpe:2.3:o:qualcomm:sdx12_firmware:-:::::::*`
–	qualcomm	sdx55_firmware	All versions `cpe:2.3:o:qualcomm:sdx55_firmware:-:::::::*`
–	qualcomm	sdx55m_firmware	All versions `cpe:2.3:o:qualcomm:sdx55m_firmware:-:::::::*`
–	qualcomm	sdx65_firmware	All versions `cpe:2.3:o:qualcomm:sdx65_firmware:-:::::::*`
–	qualcomm	sdxr1_firmware	All versions `cpe:2.3:o:qualcomm:sdxr1_firmware:-:::::::*`
–	qualcomm	sdxr2_5g_firmware	All versions `cpe:2.3:o:qualcomm:sdxr2_5g_firmware:-:::::::*`
–	qualcomm	sm6225_firmware	All versions `cpe:2.3:o:qualcomm:sm6225_firmware:-:::::::*`
–	qualcomm	sm6250_firmware	All versions `cpe:2.3:o:qualcomm:sm6250_firmware:-:::::::*`
–	qualcomm	sm6250p_firmware	All versions `cpe:2.3:o:qualcomm:sm6250p_firmware:-:::::::*`
–	qualcomm	sm6375_firmware	All versions `cpe:2.3:o:qualcomm:sm6375_firmware:-:::::::*`
–	qualcomm	sm7250p_firmware	All versions `cpe:2.3:o:qualcomm:sm7250p_firmware:-:::::::*`
–	qualcomm	sm7315_firmware	All versions `cpe:2.3:o:qualcomm:sm7315_firmware:-:::::::*`
–	qualcomm	sm7325p_firmware	All versions `cpe:2.3:o:qualcomm:sm7325p_firmware:-:::::::*`
–	qualcomm	wcd9335_firmware	All versions `cpe:2.3:o:qualcomm:wcd9335_firmware:-:::::::*`
–	qualcomm	wcd9360_firmware	All versions `cpe:2.3:o:qualcomm:wcd9360_firmware:-:::::::*`
–	qualcomm	wcd9370_firmware	All versions `cpe:2.3:o:qualcomm:wcd9370_firmware:-:::::::*`
–	qualcomm	wcd9375_firmware	All versions `cpe:2.3:o:qualcomm:wcd9375_firmware:-:::::::*`
–	qualcomm	wcd9380_firmware	All versions `cpe:2.3:o:qualcomm:wcd9380_firmware:-:::::::*`
–	qualcomm	wcd9385_firmware	All versions `cpe:2.3:o:qualcomm:wcd9385_firmware:-:::::::*`
–	qualcomm	wcn3610_firmware	All versions `cpe:2.3:o:qualcomm:wcn3610_firmware:-:::::::*`
–	qualcomm	wcn3620_firmware	All versions `cpe:2.3:o:qualcomm:wcn3620_firmware:-:::::::*`
–	qualcomm	wcn3910_firmware	All versions `cpe:2.3:o:qualcomm:wcn3910_firmware:-:::::::*`
–	qualcomm	wcn3950_firmware	All versions `cpe:2.3:o:qualcomm:wcn3950_firmware:-:::::::*`
–	qualcomm	wcn3988_firmware	All versions `cpe:2.3:o:qualcomm:wcn3988_firmware:-:::::::*`
–	qualcomm	wcn3991_firmware	All versions `cpe:2.3:o:qualcomm:wcn3991_firmware:-:::::::*`
–	qualcomm	wcn3999_firmware	All versions `cpe:2.3:o:qualcomm:wcn3999_firmware:-:::::::*`
–	qualcomm	wcn6740_firmware	All versions `cpe:2.3:o:qualcomm:wcn6740_firmware:-:::::::*`
–	qualcomm	wcn6750_firmware	All versions `cpe:2.3:o:qualcomm:wcn6750_firmware:-:::::::*`
–	qualcomm	wcn6850_firmware	All versions `cpe:2.3:o:qualcomm:wcn6850_firmware:-:::::::*`
–	qualcomm	wcn6851_firmware	All versions `cpe:2.3:o:qualcomm:wcn6851_firmware:-:::::::*`
–	qualcomm	wcn6855_firmware	All versions `cpe:2.3:o:qualcomm:wcn6855_firmware:-:::::::*`
–	qualcomm	wcn6856_firmware	All versions `cpe:2.3:o:qualcomm:wcn6856_firmware:-:::::::*`
–	qualcomm	wsa8830_firmware	All versions `cpe:2.3:o:qualcomm:wsa8830_firmware:-:::::::*`
–	qualcomm	wsa8835_firmware	All versions `cpe:2.3:o:qualcomm:wsa8835_firmware:-:::::::*`

Original advisory text

ASB-A-202025599

Improper validation of function pointer type with actual function signature can lead to assertion in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Voice & Music, Snapdragon Wearables

References

https://source.android.com/security/bulletin/2022-01-01 Vendor Advisory
https://source.codeaurora.org/quic/le/platform/hardware/qcom/audio/commit/?id=af... Patch
https://source.codeaurora.org/quic/le/platform/hardware/qcom/audio/commit/?id=37... Patch
https://www.qualcomm.com/company/product-security/bulletins/january-2022-bulleti... Patch Vendor Advisory

Severity

7.5 High

Exploitation

<1% chance of attack within 30 days

Type

CWE-617Reachable Assertion

Timeline

Published1 Jan 2022

Updated4 Nov 2026

First seen10 Sep 2026

Sources

ASB-A-202025599 · OSV

CVE-2021-30353 · NVD

Track software like this

Free during beta