CVEs-PoC/2021/CVE-2021-1965.md

### [CVE-2021-1965](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-1965)
![](https://img.shields.io/static/v1?label=Product&message=Snapdragon%20Auto%2C%20Snapdragon%20Compute%2C%20Snapdragon%20Connectivity%2C%20Snapdragon%20Mobile%2C%20Snapdragon%20Wired%20Infrastructure%20and%20Networking&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=AQT1000%2C%20AR9380%2C%20CSR8811%2C%20IPQ4018%2C%20IPQ4019%2C%20IPQ4028%2C%20IPQ4029%2C%20IPQ5010%2C%20IPQ5018%2C%20IPQ5028%2C%20IPQ6000%2C%20IPQ6005%2C%20IPQ6010%2C%20IPQ6018%2C%20IPQ6028%2C%20IPQ8064%2C%20IPQ8065%2C%20IPQ8068%2C%20IPQ8070%2C%20IPQ8070A%2C%20IPQ8071A%2C%20IPQ8072A%2C%20IPQ8074A%2C%20IPQ8076%2C%20IPQ8076A%2C%20IPQ8078%2C%20IPQ8078A%2C%20IPQ8173%2C%20IPQ8174%2C%20PMP8074%2C%20QCA4024%2C%20QCA6390%2C%20QCA6391%2C%20QCA6420%2C%20QCA6426%2C%20QCA6430%2C%20QCA6436%2C%20QCA6574A%2C%20QCA6574AU%2C%20QCA6595AU%2C%20QCA6696%2C%20QCA7500%2C%20QCA8072%2C%20QCA8075%2C%20QCA8081%2C%20QCA9880%2C%20QCA9886%2C%20QCA9888%2C%20QCA9889%2C%20QCA9898%2C%20QCA9980%2C%20QCA9984%2C%20QCA9985%2C%20QCA9990%2C%20QCA9992%2C%20QCA9994%2C%20QCN5021%2C%20QCN5022%2C%20QCN5024%2C%20QCN5052%2C%20QCN5054%2C%20QCN5121%2C%20QCN5122%2C%20QCN5124%2C%20QCN5152%2C%20QCN5154%2C%20QCN5164%2C%20QCN5550%2C%20QCN6023%2C%20QCN6024%2C%20QCN6122%2C%20QCN9000%2C%20QCN9012%2C%20QCN9022%2C%20QCN9024%2C%20QCN9070%2C%20QCN9072%2C%20QCN9074%2C%20QCN9100%2C%20SA6145P%2C%20SA6150P%2C%20SA6155P%2C%20SA8145P%2C%20SA8150P%2C%20SA8155P%2C%20SA8195P%2C%20SD%20675%2C%20SD675%2C%20SD678%2C%20SD720G%2C%20SD730%2C%20SD778G%2C%20SD780G%2C%20SD855%2C%20SD865%205G%2C%20SD870%2C%20SD888%2C%20SD888%205G%2C%20SDX50M%2C%20SDX55%2C%20SDX55M%2C%20SDXR2%205G%2C%20SM6250%2C%20SM7315%2C%20SM7325P%2C%20WCD9341%2C%20WCD9370%2C%20WCD9375%2C%20WCD9380%2C%20WCD9385%2C%20WCN3910%2C%20WCN3950%2C%20WCN3980%2C%20%20...%5Btruncated*%5D%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Buffer%20Copy%20Without%20Checking%20Size%20of%20Input%20in%20WLAN&color=brightgreen)

### Description

Possible buffer overflow due to lack of parameter length check during MBSSID scan IE parse in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking

### POC

#### Reference
- https://www.qualcomm.com/company/product-security/bulletins/july-2021-bulletin

#### Github
- https://github.com/ARPSyndicate/cve-scores
- https://github.com/ARPSyndicate/cvemon
- https://github.com/Fans0n-Fan/Awesome-IoT-exp
- https://github.com/NaInSec/CVE-PoC-in-GitHub
- https://github.com/SYRTI/POC_to_review
- https://github.com/Stoobyy/Kyocera-A101BM-Exploitation
- https://github.com/WhooAmii/POC_to_review
- https://github.com/foxtrot/CVE-2021-1965
- https://github.com/k0mi-tg/CVE-POC
- https://github.com/manas3c/CVE-POC
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/parsdefense/CVE-2021-1965
- https://github.com/soosmile/POC
- https://github.com/sqrtrev/CVE-2021-1965
- https://github.com/tanjiti/sec_profile
- https://github.com/trhacknon/Pocingit
- https://github.com/whoforget/CVE-POC
- https://github.com/youwizard/CVE-POC
- https://github.com/zecool/cve