CVE-2021-32487: Buffer Overflow
Published Sep 9, 2021
·Updated
In modem 2G RRM, there is a possible system crash due to a heap buffer overflow. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00500736; Issue ID: ALPS04938456.
Affected Software
20 affected components
MediaTek Modem=lr12a
MediaTek Modem=lr13
MediaTek Mt6739
MediaTek Mt6761
MediaTek Mt6762
MediaTek Mt6762d
MediaTek Mt6762m
MediaTek Mt6763
MediaTek Mt6765
MediaTek Mt6765t
MediaTek Mt6767
MediaTek Mt6768
MediaTek Mt6769
MediaTek Mt6769t
MediaTek Mt6769z
MediaTek Mt6771
MediaTek Mt6779
MediaTek Mt6783
MediaTek Mt6785
MediaTek Mt6785t
Event History
Sep 9, 2021
CVE Published
via MITRE·03:10 PM
Data Sourced
via MITRE·03:10 PM
Description
Frequently Asked Questions
1
What is CVE-2021-32487?
CVE-2021-32487 is a vulnerability in modem 2G RRM that could lead to a system crash due to a heap buffer overflow.
2
How can CVE-2021-32487 be exploited?
CVE-2021-32487 can be exploited remotely without any user interaction needed.
3
What is the severity of CVE-2021-32487?
The severity of CVE-2021-32487 is high with a CVSS score of 7.5.
4
Which software versions are affected by CVE-2021-32487?
CVE-2021-32487 affects Mediatek Modem versions lr12a and lr13.
5
How can I patch CVE-2021-32487?
To patch CVE-2021-32487, apply the Patch ID MOLY00500736 provided by Mediatek.