Buffer overflow in Qualcomm products - CVE-2021-1965
Published: July 5, 2021 / Updated: December 19, 2024
Vulnerability identifier: #VU54533
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1965
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
Public exploit is available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to lack of parameter length check during MBSSID scan IE parse in WLAN Host Communication. A remote attacker can send specially crafted traffic to the device, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
QCN9100
SD8655G
SD780G
SD778G
SD720G
SD678
SA8195P
SA8155P
SA8150P
SA8145P
SA6150P
SA6145P
SD870
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9012
QCN9000
QCN6122
QCN6024
QCN6023
QCN5550
QCN5164
QCN5154
QCN5152
QCN5124
WCN3910
WSA8835
WSA8830
WSA8815
WSA8810
WCN6856
WCN6855
WCN6851
WCN6850
WCN6750
WCN6740
WCN3998
WCN3991
WCN3988
WCN3980
WCN3950
QCN5122
WCD9385
WCD9380
WCD9375
WCD9370
WCD9341
SM7325P
SM7315
SM6250
SDXR25G
SDX55M
SDX50M
SD8885G
QCA4024
PMP8074
IPQ8174
IPQ8173
IPQ8078A
IPQ8078
IPQ8076A
IPQ8076
IPQ8074A
IPQ8072A
IPQ8071A
IPQ8070A
IPQ8070
IPQ8068
IPQ8065
QCA6390
IPQ6028
IPQ6018
IPQ6010
IPQ6005
IPQ6000
IPQ5028
IPQ5018
IPQ5010
IPQ4029
IPQ4028
IPQ4018
CSR8811
AR9380
QCA9886
QCN5121
QCN5054
QCN5052
QCN5024
QCN5022
QCN5021
QCA9994
QCA9992
QCA9990
QCA9985
QCA9984
QCA9898
QCA9889
QCA9888
AQT1000
QCA9880
QCA8081
QCA8075
QCA8072
QCA7500
QCA6696
QCA6595AU
QCA6574A
QCA6436
QCA6430
QCA6426
QCA6420
QCA6391
SD855
SD730
SD675
SA6155P
SDX55
SD888
IPQ8064
IPQ4019
QCA9980
QCA6574AU
SD8655G
SD780G
SD778G
SD720G
SD678
SA8195P
SA8155P
SA8150P
SA8145P
SA6150P
SA6145P
SD870
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9012
QCN9000
QCN6122
QCN6024
QCN6023
QCN5550
QCN5164
QCN5154
QCN5152
QCN5124
WCN3910
WSA8835
WSA8830
WSA8815
WSA8810
WCN6856
WCN6855
WCN6851
WCN6850
WCN6750
WCN6740
WCN3998
WCN3991
WCN3988
WCN3980
WCN3950
QCN5122
WCD9385
WCD9380
WCD9375
WCD9370
WCD9341
SM7325P
SM7315
SM6250
SDXR25G
SDX55M
SDX50M
SD8885G
QCA4024
PMP8074
IPQ8174
IPQ8173
IPQ8078A
IPQ8078
IPQ8076A
IPQ8076
IPQ8074A
IPQ8072A
IPQ8071A
IPQ8070A
IPQ8070
IPQ8068
IPQ8065
QCA6390
IPQ6028
IPQ6018
IPQ6010
IPQ6005
IPQ6000
IPQ5028
IPQ5018
IPQ5010
IPQ4029
IPQ4028
IPQ4018
CSR8811
AR9380
QCA9886
QCN5121
QCN5054
QCN5052
QCN5024
QCN5022
QCN5021
QCA9994
QCA9992
QCA9990
QCA9985
QCA9984
QCA9898
QCA9889
QCA9888
AQT1000
QCA9880
QCA8081
QCA8075
QCA8072
QCA7500
QCA6696
QCA6595AU
QCA6574A
QCA6436
QCA6430
QCA6426
QCA6420
QCA6391
SD855
SD730
SD675
SA6155P
SDX55
SD888
IPQ8064
IPQ4019
QCA9980
QCA6574AU
How to mitigate CVE-2021-1965
Install updates from vendor's website.