CVEs-PoC/2021/CVE-2021-1977.md

### [CVE-2021-1977](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1977)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Auto%2C%20Snapdragon%20Compute%2C%20Snapdragon%20Connectivity%2C%20Snapdragon%20Consumer%20Electronics%20Connectivity%2C%20Snapdragon%20Consumer%20IOT%2C%20Snapdragon%20Industrial%20IOT%2C%20Snapdragon%20IoT%2C%20Snapdragon%20Mobile%2C%20Snapdragon%20Voice%20%26%20Music&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=APQ8009%2C%20APQ8017%2C%20APQ8053%2C%20APQ8064AU%2C%20APQ8096AU%2C%20AR8031%2C%20AR8035%2C%20CSRA6620%2C%20CSRA6640%2C%20CSRB31024%2C%20MDM9150%2C%20MDM9206%2C%20MDM9250%2C%20MDM9607%2C%20MDM9626%2C%20MDM9628%2C%20MDM9650%2C%20MSM8953%2C%20MSM8996AU%2C%20QCA4020%2C%20QCA6174A%2C%20QCA6175A%2C%20QCA6310%2C%20QCA6320%2C%20QCA6335%2C%20QCA6390%2C%20QCA6391%2C%20QCA6426%2C%20QCA6436%2C%20QCA6564A%2C%20QCA6564AU%2C%20QCA6574%2C%20QCA6574A%2C%20QCA6574AU%2C%20QCA6584AU%2C%20QCA6595%2C%20QCA6595AU%2C%20QCA6696%2C%20QCA8337%2C%20QCA9367%2C%20QCA9377%2C%20QCA9379%2C%20QCM4290%2C%20QCM6125%2C%20QCS405%2C%20QCS410%2C%20QCS4290%2C%20QCS603%2C%20QCS605%2C%20QCS610%2C%20QCS6125%2C%20QRB5165%2C%20SA415M%2C%20SA515M%2C%20SA6145P%2C%20SA6150P%2C%20SA6155%2C%20SA6155P%2C%20SA8145P%2C%20SA8150P%2C%20SA8155%2C%20SA8155P%2C%20SA8195P%2C%20SD%20675%2C%20SD460%2C%20SD660%2C%20SD662%2C%20SD665%2C%20SD675%2C%20SD678%2C%20SD690%205G%2C%20SD720G%2C%20SD750G%2C%20SD765%2C%20SD765G%2C%20SD768G%2C%20SD778G%2C%20SD780G%2C%20SD820%2C%20SD835%2C%20SD845%2C%20SD855%2C%20SD865%205G%2C%20SD870%2C%20SD888%2C%20SD888%205G%2C%20SDX12%2C%20SDX20%2C%20SDX20M%2C%20SDX55%2C%20SDX55M%2C%20SDXR1%2C%20SDXR2%205G%2C%20SM4125%2C%20SM6250%2C%20SM7250P%2C%20SM7315%2C%20SM7325P%2C%20WCD9326%2C%20WCD9330%2C%20WCD9335%2C%20WCD9340%2C%20WCD9341%2C%20WCD9370%2C%20WCD9375%2C%20WCD9380%2C%20WCD9385%2C%20WCN3610%2C%20WCN3615%2C%20WCN3660B%2C%20WCN3680B%2C%20WCN3910%2C%20WCN3950%2C%20WCN3980%2C%20WCN3988%2C%20WC%20...%5Btruncated*%5D%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Over-read%20in%20WLAN&color=brightgreen)

### Description

Possible buffer over read due to improper validation of frame length while processing AEAD decryption during ASSOC response in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music

### POC

#### Reference
- https://www.qualcomm.com/company/product-security/bulletins/october-2021-bulletin

#### Github
- https://github.com/google/vanir
- https://github.com/suddenabnormalsecrets/vanir