Read the docs
TI-2021-06361 Aliases CVE-2021-24046GHSA-xq38-gh8w-xv34

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video…

Priority LOW 25CWE-471Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
None · Low · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-425.

Summary

A logic flaw in Ray-Ban® Stories device software allowed some parameters like video capture duration limit to be modified through the Facebook View application. This issue affected versions of device software before 2107460.6810.0.

Why it matters now

EPSS 0.00721 54th percentileScored 2026-11-07
Fix Fixed Ray-Ban® Stories Smart Glasses (Meta Platforms, Inc): 2107460.6810.0

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
Meta PlatformsRay-Ban® Stories Smart Glassesbefore 2107460.6810.02107460.6810.0Patch availableCNA
  • Ray-Ban® Stories Smart Glasses VendorMeta Platforms Affected before 2107460.6810.0 Fixed in 2107460.6810.0 Patch available CNA

CPE configurations NVD · 8

CPEVersionsRoleVendor
cpe:2.3:o:ray-ban:stories_rw4003_65582v_48-23_firmware:*:*:*:*:*:*:*:*before 2107460.6810.0VulnerableRay-ban
cpe:2.3:h:ray-ban:stories_rw4003_65582v_48-23:-:*:*:*:*:*:*:*not specified by NVDRunning onRay-ban
cpe:2.3:o:ray-ban:stories_rw4002_601\/71_50-22_firmware:*:*:*:*:*:*:*:*before 2107460.6810.0VulnerableRay-ban
cpe:2.3:h:ray-ban:stories_rw4002_601\/71_50-22:-:*:*:*:*:*:*:*not specified by NVDRunning onRay-ban
cpe:2.3:o:ray-ban:stories_rw4005_656013_51-20_firmware:*:*:*:*:*:*:*:*before 2107460.6810.0VulnerableRay-ban
cpe:2.3:h:ray-ban:stories_rw4005_656013_51-20:-:*:*:*:*:*:*:*not specified by NVDRunning onRay-ban
cpe:2.3:o:ray-ban:stories_rw4005_6563m3_51-20_firmware:*:*:*:*:*:*:*:*before 2107460.6810.0.VulnerableRay-ban
cpe:2.3:h:ray-ban:stories_rw4005_6563m3_51-20:-:*:*:*:*:*:*:*not specified by NVDRunning onRay-ban
  • cpe:2.3:o:ray-ban:stories_rw4003_65582v_48-23_firmware:*:*:*:*:*:*:*:* Versions before 2107460.6810.0 Vulnerable ·Ray-ban
  • cpe:2.3:h:ray-ban:stories_rw4003_65582v_48-23:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ray-ban
  • cpe:2.3:o:ray-ban:stories_rw4002_601\/71_50-22_firmware:*:*:*:*:*:*:*:* Versions before 2107460.6810.0 Vulnerable ·Ray-ban
  • cpe:2.3:h:ray-ban:stories_rw4002_601\/71_50-22:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ray-ban
  • cpe:2.3:o:ray-ban:stories_rw4005_656013_51-20_firmware:*:*:*:*:*:*:*:* Versions before 2107460.6810.0 Vulnerable ·Ray-ban
  • cpe:2.3:h:ray-ban:stories_rw4005_656013_51-20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ray-ban
  • cpe:2.3:o:ray-ban:stories_rw4005_6563m3_51-20_firmware:*:*:*:*:*:*:*:* Versions before 2107460.6810.0. Vulnerable ·Ray-ban
  • cpe:2.3:h:ray-ban:stories_rw4005_6563m3_51-20:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Ray-ban

Remediation

  • Fix · CNA Ray-Ban® Stories Smart Glasses (Meta Platforms, Inc) Fixed in 2107460.6810.0

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-24046
  2. 2026-10-03 Alias added: GHSA-xq38-gh8w-xv34

References

Advisory 1

  • TI-2025-34672 An integer overflow vulnerability in the loading of ExecuTorch models can cause… CVSS 3.1CRITICAL 9.8
  • TI-2025-34671 Heap-based buffer overflow in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
  • TI-2025-34670 Out-of-bounds read in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
  • TI-2025-34669 Heap-based buffer overflow in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
  • TI-2025-21707 Integer overflow in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
  • TI-2025-21706 Integer overflow in Meta Platforms ExecuTorch CVSS 3.1CRITICAL 9.8
See all 12 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences