CVE-2024-21466
Integer Underflow (Wrap or Wraparound) in WLAN Host Communication
Information disclosure while parsing sub-IE length during new IE generation.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- Low
Exploit likelihood
What each source reports
CVE List Score used
Integer Underflow (Wrap or Wraparound) in WLAN Host Communication
Information disclosure while parsing sub-IE length during new IE generation.
- Record
CVE-2024-21466- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - Weakness
- CWE-191
- Updated
- 2026-11-02
EUVDEUVD-2024-19175
Information disclosure while parsing sub-IE length during new IE generation.
- Record
EUVD-2024-19175- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vmr3-xrh5-2r29
Information disclosure while parsing sub-IE length during new IE generation.
Information disclosure while parsing sub-IE length during new IE generation.
- Record
GHSA-vmr3-xrh5-2r29- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - Weakness
- CWE-191
- Updated
- 2026-11-02
NVD
Information disclosure while parsing sub-IE length during new IE generation.
- Record
CVE-2024-21466- CVSS 3.1
- 6.5 Medium
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L - CVSS 3.1
- 7.5 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N - Weakness
- CWE-191
- Updated
- 2026-11-02
Affected products
- qualcomm fastconnect 7800 firmware
- qualcomm immersive home 3210 platform firmware
- qualcomm immersive home 326 platform firmware
- qualcomm ipq5300 firmware
- qualcomm ipq5302 firmware
- qualcomm ipq5312 firmware
- qualcomm ipq5332 firmware
- qualcomm ipq9008 firmware
- qualcomm ipq9554 firmware
- qualcomm ipq9570 firmware
- qualcomm ipq9574 firmware
- qualcomm qam8255p firmware
Show 53 moreShow less
- qualcomm qam8620p firmware
- qualcomm qam8650p firmware
- qualcomm qam8775p firmware
- qualcomm qamsrv1h firmware
- qualcomm qamsrv1m firmware
- qualcomm qca0000 firmware
- qualcomm qca6554a firmware
- qualcomm qca6564au firmware
- qualcomm qca6574 firmware
- qualcomm qca6574a firmware
- qualcomm qca6574au firmware
- qualcomm qca6584au firmware
- qualcomm qca6595 firmware
- qualcomm qca6595au firmware
- qualcomm qca6678aq firmware
- qualcomm qca6696 firmware
- qualcomm qca6698aq firmware
- qualcomm qca8075 firmware
- qualcomm qca8081 firmware
- qualcomm qca8082 firmware
- qualcomm qca8084 firmware
- qualcomm qca8085 firmware
- qualcomm qca8386 firmware
- qualcomm qcc2073 firmware
- qualcomm qcc2076 firmware
- qualcomm qcf8000 firmware
- qualcomm qcf8001 firmware
- qualcomm qcn5124 firmware
- qualcomm qcn6402 firmware
- qualcomm qcn6412 firmware
- qualcomm qcn6422 firmware
- qualcomm qcn6432 firmware
- qualcomm qcn9000 firmware
- qualcomm qcn9074 firmware
- qualcomm qcn9274 firmware
- qualcomm sa7255p firmware
- qualcomm sa7775p firmware
- qualcomm sa8255p firmware
- qualcomm sa8620p firmware
- qualcomm sa8650p firmware
- qualcomm sa8770p firmware
- qualcomm sa8775p firmware
- qualcomm sa9000p firmware
- qualcomm srv1h firmware
- qualcomm srv1l firmware
- qualcomm srv1m firmware
- qualcomm sw5100 firmware
- qualcomm sw5100p firmware
- qualcomm wcn3980 firmware
- qualcomm wcn3988 firmware
- qualcomm wsa8830 firmware
- qualcomm wsa8835 firmware
- qualcomm, inc. snapdragon
Affected packages
| Package | Affected | Fixed |
|---|---|---|
:unknown:Android |
SoCVersion:0 up to SoCVersion:2024-07-05, plus listed versions SoCVersion |
SoCVersion:2024-07-05 |
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | OSV | |
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-21466 is a medium vulnerability (CVSS 6.5) in Qualcomm Fastconnect 7800 Firmware, published July 1, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.21%, the 11th percentile. Fixed in :unknown: SoCVersion:2024-07-05.