CVE-2021-43573
A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the...
A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the client code when processing a malformed IE length of HT capability information in the Beacon and Association response frame.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the client code when processing a malformed IE length of HT capability information in the Beacon and Association response frame.
- Record
CVE-2021-43573- CVSS 3.1
- 9.8 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE ListNo score
A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the client code when processing a malformed IE length of HT capability information in the Beacon and Association response frame.
- Record
CVE-2021-43573- Updated
- 2026-11-02
EUVDEUVD-2021-30491No score
A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the client code when processing a malformed IE length of HT capability information in the Beacon and Association response frame.
- Record
EUVD-2021-30491- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7fmp-m7xh-f474No score
A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the...
A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10. It exists in the client code when processing a malformed IE length of HT capability information in the Beacon and Association response frame.
- Record
GHSA-7fmp-m7xh-f474- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-43573 is a critical vulnerability (CVSS 9.8) in Realtek Rtl8195am Firmware, published November 11, 2021. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.10%, the 66th percentile. No source names a fixed version.