CVE-2021-32486: Buffer Overflow
Published Sep 9, 2021
·Updated
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500621; Issue ID: ALPS04964928.
Affected Software
20 affected components
MediaTek Modem=lr12a
MediaTek Modem=lr13
MediaTek Mt6739
MediaTek Mt6761
MediaTek Mt6762
MediaTek Mt6762d
MediaTek Mt6762m
MediaTek Mt6763
MediaTek Mt6765
MediaTek Mt6765t
MediaTek Mt6767
MediaTek Mt6768
MediaTek Mt6769
MediaTek Mt6769t
MediaTek Mt6769z
MediaTek Mt6771
MediaTek Mt6779
MediaTek Mt6783
MediaTek Mt6785
MediaTek Mt6785t
Event History
Sep 9, 2021
CVE Published
via MITRE·03:10 PM
Data Sourced
via MITRE·03:10 PM
Description
Frequently Asked Questions
1
What is CVE-2021-32486?
CVE-2021-32486 is a vulnerability in modem 2G RRM that could lead to a system crash due to a heap buffer overflow, resulting in remote denial of service.
2
How severe is CVE-2021-32486?
CVE-2021-32486 has a severity rating of 7.5 (high).
3
What software is affected by CVE-2021-32486?
Mediatek Modem versions lr12a and lr13 are affected by CVE-2021-32486.
4
Is user interaction required to exploit CVE-2021-32486?
No, user interaction is not needed for exploitation of CVE-2021-32486.
5
How can I patch CVE-2021-32486?
To patch CVE-2021-32486, apply the Patch ID: MOLY00500621 provided by Mediatek.