Skip to main content

Ar7420 Firmware CVE-2021-1887

HIGH
Reachable Assertion (CWE-617)
2021-07-13 product-security@qualcomm.com
Qualcomm Denial Of Service Ar7420 Firmware Ar9380 Firmware Csr8811 Firmware Ipq4018 Firmware Ipq4019 Firmware Ipq4028 Firmware Ipq4029 Firmware Ipq8064 Firmware Ipq8065 Firmware Ipq8069 Firmware Ipq8074 Firmware Qca6310 Firmware Qca6320 Firmware Qca6335 Firmware Qca6428 Firmware Qca6438 Firmware Qca7500 Firmware Qca7520 Firmware Qca7550 Firmware Qca9531 Firmware Qca9558 Firmware Qca9561 Firmware Qca9563 Firmware Qca9880 Firmware Qca9882 Firmware Qca9887 Firmware Qca9888 Firmware Qca9889 Firmware Qca9896 Firmware Qca9898 Firmware Qca9980 Firmware Qca9984 Firmware Qca9990 Firmware Qca9992 Firmware Qca9994 Firmware Qcn5024 Firmware Qcn5054 Firmware Qcn5501 Firmware Qcn5502 Firmware
7.5
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.5 HIGH
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High

Lifecycle Timeline

1
CVE Published
Jul 13, 2021 - 06:15 nvd
HIGH 7.5

DescriptionNVD

An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking

AnalysisAI

An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-617. An assertion can be reached in the WLAN subsystem while using the Wi-Fi Fine Timing Measurement protocol in Snapdragon Wired Infrastructure and Networking Affected products include: Qualcomm Ar7420 Firmware, Qualcomm Ar9380 Firmware, Qualcomm Csr8811 Firmware, Qualcomm Ipq4018 Firmware, Qualcomm Ipq4019 Firmware.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Ar7420 Firmware

View all
CVE-2021-1976 CRITICAL
9.8 Sep 17

A use after free can occur due to improper validation of P2P device address in PD Request frame in Snapdragon Auto, Snap
CVE-2021-1972 CRITICAL
9.8 Sep 08

Possible buffer overflow due to improper validation of device types during P2P search in Snapdragon Auto, Snapdragon Com
CVE-2023-28565 HIGH
7.8 Sep 05

Memory corruption in WLAN HAL while handling command streams through WMI interfaces. Rated high severity (CVSS 7.8), thi
CVE-2021-1909 HIGH
7.8 Sep 09

Buffer overflow occurs in trusted applications due to lack of length check of parameters in Snapdragon Auto, Snapdragon

CVE-2021-1924 MEDIUM
5.5 Nov 12

Information disclosure through timing and power side-channels during mod exponentiation for RSA-CRT in Snapdragon Auto,

CVE-2025-21482 HIGH
7.1 Sep 24

Cryptographic issue while performing RSA PKCS padding decoding. Rated high severity (CVSS 7.1), this vulnerability is lo

Same weakness CWE-617 – Reachable Assertion

View all
CVE-2016-8864 HIGH
7.5
CVE-2020-12417 HIGH POC
8.8
CVE-2020-6623 HIGH POC
8.8
CVE-2020-6619 HIGH POC
8.8
CVE-2020-6617 HIGH POC
8.8
CVE-2023-37023 HIGH POC
8.6
CVE-2023-37021 HIGH POC
8.6
CVE-2023-37020 HIGH POC
8.6

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2021-1887 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy