CVE-2024-21467 Buffer Over-read in WLAN Host Communication
An attacker can disclose sensitive information via a buffer over-read in WLAN host communication during scan entry generation on Android devices.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-21467?
CVE-2024-21467 is a medium-severity vulnerability in Qualcomm Csr8811 Firmware, published on 5 Aug 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Information disclosure while handling beacon probe frame during scan entry generation in client side.
Which versions are affected by CVE-2024-21467?
It affects 129 products.
Products include Qualcomm Csr8811 Firmware, Qualcomm Fastconnect 6800 Firmware, Qualcomm Fastconnect 6900 Firmware, Qualcomm Fastconnect 7800 Firmware, Qualcomm Immersive Home 214 Platform Firmware, Qualcomm Immersive Home 216 Platform Firmware and 123 more.
How do I fix CVE-2024-21467?
Apply the vendor's patch.
Is CVE-2024-21467 being exploited?
There is no known exploitation of CVE-2024-21467 in the wild and no public exploit code.
Other vulnerabilities in Qualcomm Csr8811 Firmware
- CVE-2024-33066 Improper Input Validation in WLAN Resource Manager
- CVE-2022-25652 Weak cryptography in Snapdragon Wired Infrastructure and Networking
- CVE-2023-33053 Improper Validation of Array Index in Kernel
- CVE-2022-40522 Double free in Linux Networking
- CVE-2024-33049 Buffer Over-read in WLAN Host Communication
Sources
Also known as 3591858, A-323926303, GHSA-2ww8-pj73-gx5x, PUB-A-323926303.