CVE-2021-32485: Buffer Overflow
Published Sep 9, 2021
·Updated
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964926.
Affected Software
20 affected components
MediaTek Modem=lr12a
MediaTek Modem=lr13
MediaTek Mt6739
MediaTek Mt6761
MediaTek Mt6762
MediaTek Mt6762d
MediaTek Mt6762m
MediaTek Mt6763
MediaTek Mt6765
MediaTek Mt6765t
MediaTek Mt6767
MediaTek Mt6768
MediaTek Mt6769
MediaTek Mt6769t
MediaTek Mt6769z
MediaTek Mt6771
MediaTek Mt6779
MediaTek Mt6783
MediaTek Mt6785
MediaTek Mt6785t
Event History
Sep 9, 2021
CVE Published
via MITRE·03:10 PM
Data Sourced
via MITRE·03:10 PM
Description
Frequently Asked Questions
1
What is CVE-2021-32485?
CVE-2021-32485 is a vulnerability in modem 2G RRM that could lead to a system crash due to a heap buffer overflow, resulting in a remote denial of service attack.
2
What is the severity of CVE-2021-32485?
The severity of CVE-2021-32485 is high, with a CVSS base score of 7.5.
3
How can CVE-2021-32485 be exploited?
CVE-2021-32485 can be exploited remotely without requiring any user interaction.
4
Which software is affected by CVE-2021-32485?
The affected software includes modem 2G RRM versions lr12a and lr13 by Mediatek.
5
Is there a patch available for CVE-2021-32485?
Yes, a patch for CVE-2021-32485 is available with the Patch ID: MOLY00500621.