Buffer Over-read in Qualcomm products - CVE-2021-1971
Published: September 6, 2021
Vulnerability identifier: #VU56335
CSH Severity: Medium
CVSS v4: 7.1 [CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-1971
CWE-ID: CWE-126
Exploitation vector: Adjecent network
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to lack of physical layer state validation within the WLAN HAL. A remote attacker can send specially crafted data to the system and perform a denial of service (DoS) attack.
Affected software
QCN9000
SA6155
SA6150P
SA6145P
SA515M
SA415M
QSM8350
QCX315
QCN9100
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9012
SA8145P
QCN6024
QCN6023
QCN5550
QCN5164
QCN5154
QCN5152
QCN5124
QCN5122
QCN5121
QCN5064
QCN5054
QCN5052
QCN5024
QCN5022
WCD9341
WSA8835
WSA8830
WSA8815
WSA8810
WCN6856
WCN6855
WCN6851
WCN6850
WCN6750
WCN6745
WCN3998
WCD9385
WCD9380
WCD9360
QCN5021
WCD9340
SDXR25G
SDX55M
SD8885G
SD870
SD8655G
SD8CX
SD8C
SC8280XP
SA8195P
SA8155P
SA8155
SA8150P
IPQ8072
QCA2065
QCA2064
QCA2062
QCA1064
QCA1062
IPQ8174
IPQ8173
IPQ8078A
IPQ8078
IPQ8076A
IPQ8076
IPQ8074A
IPQ8072A
QCA2066
IPQ8071A
IPQ8071
IPQ8070A
IPQ8070
IPQ6028
IPQ6018
IPQ6010
IPQ6005
IPQ6000
IPQ5018
IPQ5010
CSRB31024
CSR8811
AR8035
QCA6574
QCA9984
QCA9889
QCA9888
QCA8337
QCA8081
QCA8075
QCA8072
QCA6696
QCA6694
QCA6595AU
QCA6595
QCA6584AU
QCA6574A
AQT1000
QCA6564AU
QCA6564A
QCA6438
QCA6436
QCA6431
QCA6430
QCA6428
QCA6426
QCA6421
QCA6420
QCA6391
QCA6390
QCA6175A
QCA4024
SA6155P
SDX55
IPQ8074
QCA6574AU
Google Android
SA6155
SA6150P
SA6145P
SA515M
SA415M
QSM8350
QCX315
QCN9100
QCN9074
QCN9072
QCN9070
QCN9024
QCN9022
QCN9012
SA8145P
QCN6024
QCN6023
QCN5550
QCN5164
QCN5154
QCN5152
QCN5124
QCN5122
QCN5121
QCN5064
QCN5054
QCN5052
QCN5024
QCN5022
WCD9341
WSA8835
WSA8830
WSA8815
WSA8810
WCN6856
WCN6855
WCN6851
WCN6850
WCN6750
WCN6745
WCN3998
WCD9385
WCD9380
WCD9360
QCN5021
WCD9340
SDXR25G
SDX55M
SD8885G
SD870
SD8655G
SD8CX
SD8C
SC8280XP
SA8195P
SA8155P
SA8155
SA8150P
IPQ8072
QCA2065
QCA2064
QCA2062
QCA1064
QCA1062
IPQ8174
IPQ8173
IPQ8078A
IPQ8078
IPQ8076A
IPQ8076
IPQ8074A
IPQ8072A
QCA2066
IPQ8071A
IPQ8071
IPQ8070A
IPQ8070
IPQ6028
IPQ6018
IPQ6010
IPQ6005
IPQ6000
IPQ5018
IPQ5010
CSRB31024
CSR8811
AR8035
QCA6574
QCA9984
QCA9889
QCA9888
QCA8337
QCA8081
QCA8075
QCA8072
QCA6696
QCA6694
QCA6595AU
QCA6595
QCA6584AU
QCA6574A
AQT1000
QCA6564AU
QCA6564A
QCA6438
QCA6436
QCA6431
QCA6430
QCA6428
QCA6426
QCA6421
QCA6420
QCA6391
QCA6390
QCA6175A
QCA4024
SA6155P
SDX55
IPQ8074
QCA6574AU
Google Android
How to mitigate CVE-2021-1971
Install updates from vendor's website.
Google Android - addressed in versions 8.1 2021-09-05, 9 2021-09-05, 10 2021-09-05, 11 2021-09-05