CVE-2021-35081

Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon…

Critical · published June 14, 2022

CVSS v3.1
9.8
EPSS
1%
Percentile
57.0
In the wild
Unconfirmed
What it is

🚨 A single malformed Wi-Fi beacon could trigger a devastating buffer overflow! This vulnerability lurks in multiple Snapdragon platforms, ready for mischief. 🔥 Think of it like a restaurant that serves menu items without checking the portion sizes. If a dish arrives overfilled, it can spill over and cause chaos in the kitchen! That's what's happening here with SSID lengths. 🍽️ If exploited, this flaw could crash your device or worse, let an attacker execute arbitrary code remotely. Imagine your car’s infotainment system suddenly going haywire or your smart home devices turning rogue! The consequences could be absolutely catastrophic!

Put simply

Think of it like a restaurant that serves menu items without checking the portion sizes. If a dish arrives overfilled, it can spill over and cause chaos in the kitchen! That's what's happening here with SSID lengths. 🍽️ This vulnerability allows buffer overflow due to improper validation of SSID lengths received from Wi-Fi beacons during an IBSS session, impacting several Snapdragon platforms.

What to do

If exploited, this flaw could crash your device or worse, let an attacker execute arbitrary code remotely. Imagine your car’s infotainment system suddenly going haywire or your smart home devices turning rogue! The consequences could be absolutely catastrophic! Update affected Snapdragon platforms to the latest version immediately. Ensure proper validation checks are in place for SSID lengths and monitor for anomalous network behavior. Don’t delay—this is crucial! You've got this! Following these steps will help keep your devices safe and sound. 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00827 · 57.0th percentile
Published
2022-06-14T10:11Z
EPSS history
Timeline
  • 14 JUN 10:11Z
    Possible buffer overflow due to improper validation of SSID length received from beacon or probe response during an IBSS session in Snapdragon Auto, Snapdragon…
    cvelistv5