CVE-2024-21466

MEDIUM
Published Jul 1, 2024 Modified Nov 21, 2024 CWE-191

Description

Information disclosure while parsing sub-IE length during new IE generation.

Is your site exposed to CVE-2024-21466?

Run a free security scan — no signup, results in seconds.

CVSS v3.1 Score

6.5
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L

Weakness Type (CWE)

CWE-191 CWE-191

Affected Products

Vendor Product
qualcomm fastconnect_7800_firmware
qualcomm fastconnect_7800
qualcomm immersive_home_3210_platform_firmware
qualcomm immersive_home_3210_platform
qualcomm immersive_home_326_platform_firmware
qualcomm immersive_home_326_platform
qualcomm ipq5300_firmware
qualcomm ipq5300
qualcomm ipq5302_firmware
qualcomm ipq5302
qualcomm ipq5312_firmware
qualcomm ipq5312
qualcomm ipq5332_firmware
qualcomm ipq5332
qualcomm ipq9008_firmware
qualcomm ipq9008
qualcomm ipq9554_firmware
qualcomm ipq9554
qualcomm ipq9570_firmware
qualcomm ipq9570
qualcomm ipq9574_firmware
qualcomm ipq9574
qualcomm qam8255p_firmware
qualcomm qam8255p
qualcomm qam8620p_firmware
qualcomm qam8620p
qualcomm qam8650p_firmware
qualcomm qam8650p
qualcomm qam8775p_firmware
qualcomm qam8775p
qualcomm qamsrv1h_firmware
qualcomm qamsrv1h
qualcomm qamsrv1m_firmware
qualcomm qamsrv1m
qualcomm qca0000_firmware
qualcomm qca0000
qualcomm qca6554a_firmware
qualcomm qca6554a
qualcomm qca6564au_firmware
qualcomm qca6564au
qualcomm qca6574_firmware
qualcomm qca6574
qualcomm qca6574a_firmware
qualcomm qca6574a
qualcomm qca6574au_firmware
qualcomm qca6574au
qualcomm qca6584au_firmware
qualcomm qca6584au
qualcomm qca6595_firmware
qualcomm qca6595
qualcomm qca6595au_firmware
qualcomm qca6595au
qualcomm qca6678aq_firmware
qualcomm qca6678aq
qualcomm qca6696_firmware
qualcomm qca6696
qualcomm qca6698aq_firmware
qualcomm qca6698aq
qualcomm qca8075_firmware
qualcomm qca8075
qualcomm qca8081_firmware
qualcomm qca8081
qualcomm qca8082_firmware
qualcomm qca8082
qualcomm qca8084_firmware
qualcomm qca8084
qualcomm qca8085_firmware
qualcomm qca8085
qualcomm qca8386_firmware
qualcomm qca8386
qualcomm qcc2073_firmware
qualcomm qcc2073
qualcomm qcc2076_firmware
qualcomm qcc2076
qualcomm qcf8000_firmware
qualcomm qcf8000
qualcomm qcf8001_firmware
qualcomm qcf8001
qualcomm qcn5124_firmware
qualcomm qcn5124
qualcomm qcn6402_firmware
qualcomm qcn6402
qualcomm qcn6412_firmware
qualcomm qcn6412
qualcomm qcn6422_firmware
qualcomm qcn6422
qualcomm qcn6432_firmware
qualcomm qcn6432
qualcomm qcn9000_firmware
qualcomm qcn9000
qualcomm qcn9074_firmware
qualcomm qcn9074
qualcomm qcn9274_firmware
qualcomm qcn9274
qualcomm sa7255p_firmware
qualcomm sa7255p
qualcomm sa7775p_firmware
qualcomm sa7775p
qualcomm sa8255p_firmware
qualcomm sa8255p
qualcomm sa8620p_firmware
qualcomm sa8620p
qualcomm sa8650p_firmware
qualcomm sa8650p
qualcomm sa8770p_firmware
qualcomm sa8770p
qualcomm sa8775p_firmware
qualcomm sa8775p
qualcomm sa9000p_firmware
qualcomm sa9000p
qualcomm srv1h_firmware
qualcomm srv1h
qualcomm srv1l_firmware
qualcomm srv1l
qualcomm srv1m_firmware
qualcomm srv1m
qualcomm sw5100_firmware
qualcomm sw5100
qualcomm sw5100p_firmware
qualcomm sw5100p
qualcomm wcn3980_firmware
qualcomm wcn3980
qualcomm wcn3988_firmware
qualcomm wcn3988
qualcomm wsa8830_firmware
qualcomm wsa8830
qualcomm wsa8835_firmware
qualcomm wsa8835

References

Frequently Asked Questions

What is CVE-2024-21466? +
Information disclosure while parsing sub-IE length during new IE generation. It has a CVSS v3.1 base score of 6.5 (MEDIUM).
How severe is CVE-2024-21466? +
CVE-2024-21466 has a CVSS v3.1 score of 6.5 out of 10, rated MEDIUM. This is a medium-severity vulnerability that should be remediated as part of regular maintenance.
What products are affected by CVE-2024-21466? +
CVE-2024-21466 affects products from qualcomm, specifically: fastconnect_7800, fastconnect_7800_firmware, immersive_home_3210_platform, immersive_home_3210_platform_firmware, immersive_home_326_platform, immersive_home_326_platform_firmware, ipq5300, ipq5300_firmware, ipq5302, ipq5302_firmware, ipq5312, ipq5312_firmware, ipq5332, ipq5332_firmware, ipq9008, ipq9008_firmware, ipq9554, ipq9554_firmware, ipq9570, ipq9570_firmware, ipq9574, ipq9574_firmware, qam8255p, qam8255p_firmware, qam8620p, qam8620p_firmware, qam8650p, qam8650p_firmware, qam8775p, qam8775p_firmware, qamsrv1h, qamsrv1h_firmware, qamsrv1m, qamsrv1m_firmware, qca0000, qca0000_firmware, qca6554a, qca6554a_firmware, qca6564au, qca6564au_firmware, qca6574, qca6574_firmware, qca6574a, qca6574a_firmware, qca6574au, qca6574au_firmware, qca6584au, qca6584au_firmware, qca6595, qca6595_firmware, qca6595au, qca6595au_firmware, qca6678aq, qca6678aq_firmware, qca6696, qca6696_firmware, qca6698aq, qca6698aq_firmware, qca8075, qca8075_firmware, qca8081, qca8081_firmware, qca8082, qca8082_firmware, qca8084, qca8084_firmware, qca8085, qca8085_firmware, qca8386, qca8386_firmware, qcc2073, qcc2073_firmware, qcc2076, qcc2076_firmware, qcf8000, qcf8000_firmware, qcf8001, qcf8001_firmware, qcn5124, qcn5124_firmware, qcn6402, qcn6402_firmware, qcn6412, qcn6412_firmware, qcn6422, qcn6422_firmware, qcn6432, qcn6432_firmware, qcn9000, qcn9000_firmware, qcn9074, qcn9074_firmware, qcn9274, qcn9274_firmware, sa7255p, sa7255p_firmware, sa7775p, sa7775p_firmware, sa8255p, sa8255p_firmware, sa8620p, sa8620p_firmware, sa8650p, sa8650p_firmware, sa8770p, sa8770p_firmware, sa8775p, sa8775p_firmware, sa9000p, sa9000p_firmware, srv1h, srv1h_firmware, srv1l, srv1l_firmware, srv1m, srv1m_firmware, sw5100, sw5100_firmware, sw5100p, sw5100p_firmware, wcn3980, wcn3980_firmware, wcn3988, wcn3988_firmware, wsa8830, wsa8830_firmware, wsa8835, wsa8835_firmware. Check the affected products table above for specific version ranges.
How do I check if I'm vulnerable to CVE-2024-21466? +
You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

Don't wait for an exploit

Scan your website for vulnerabilities like CVE-2024-21466 — free, no signup required.