Buffer overflow in Qualcomm products - CVE-2021-30321
Published: November 3, 2021
Vulnerability identifier: #VU57891
CSH Severity: High
CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2021-30321
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vulnerability details
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to lack of parameter length check during MBSSID scan IE parse. A remote attacker can trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Affected software
WCD9341
WSA8835
WSA8830
WSA8815
WSA8810
WCN6856
WCN6855
WCN6851
WCN6850
WCN3998
WCD9385
WCD9380
AQT1000
WCD9340
SD 8CX
SC8280XP
QCA6430
QCA6420
QCA6391
QCA6320
QCA2066
QCA1064
QCA1062
WSA8835
WSA8830
WSA8815
WSA8810
WCN6856
WCN6855
WCN6851
WCN6850
WCN3998
WCD9385
WCD9380
AQT1000
WCD9340
SD 8CX
SC8280XP
QCA6430
QCA6420
QCA6391
QCA6320
QCA2066
QCA1064
QCA1062
How to mitigate CVE-2021-30321
Install updates from vendor's website.