CVE-2024-53027
HIGHCVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3Tags
Description
Transient DOS may occur while processing the country IE.
Analysis
Transient DOS may occur while processing the country IE. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.
Technical Context
This vulnerability is classified as Buffer Copy without Size Check (CWE-120), which allows attackers to overflow a buffer to corrupt adjacent memory. Affected products include: Qualcomm Qca9367 Firmware, Qualcomm Qca9377 Firmware, Qualcomm Qcc2073 Firmware, Qualcomm Qcc2076 Firmware, Qualcomm Qcc710 Firmware.
Affected Products
Qualcomm Qca9367 Firmware, Qualcomm Qca9377 Firmware, Qualcomm Qcc2073 Firmware, Qualcomm Qcc2076 Firmware, Qualcomm Qcc710 Firmware.
Remediation
A vendor patch is available. Apply the latest security update as soon as possible. Always validate buffer sizes before copy operations. Use bounded functions (strncpy, snprintf). Enable compiler protections.
Priority Score
Share
External POC / Exploit Code
Leaving vuln.today