CVE-2025-20632

A vulnerability exists in the wlan AP driver (associated with MediaTek Chipsets ) due to an incorrect bounds check, which can lead to an out-of-bounds write . This flaw allows for local escalation of privilege without requiring additional execution privileges or user interaction. The issue is ide...

CVE-2025-20632

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397139; Issue ID: MSV-2188...

CVE-2025-20632

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397139; Issue ID: MSV-2188...

CVE-2025-20633

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00400889; Issue ID: MSV-2491...

CVE-2025-20631: Out-of-bounds Write

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397141; Issue ID: MSV-2187...

CVE-2025-20633: Out-of-bounds Write

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00400889; Issue ID: MSV-2491...

CVE-2025-20632: Out-of-bounds Write

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00397139; Issue ID: MSV-2188...

PT-2025-4152 · Mediatek · Mt7615 +3

Name of the Vulnerable Software and Affected Versions: MediaTek MT7603/MT7615/MT7622/MT7915 versions up to 7.4.0.1 Description: In the WLAN AP driver, there is a possible out-of-bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent code execution with no...

PT-2025-4150 · Mediatek · Mediatek Mt7615 +6

Name of the Vulnerable Software and Affected Versions: MediaTek MT7615/MT7622/MT7663/MT7915/MT7916/MT7981/MT7986 WLAN AP Driver affected versions not specified Description: In the wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local...

PT-2025-18424

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the wifi driver ath12k. The driver uses monitor destination rings for extended statistics mode and standalone...

CVE-2024-49734: Exposure of Sensitive Information to an Unauthorized Actor

In multiple functions of ConnectivityService.java, there is a possible way for a Wi-Fi AP to determine what site a device has connected to through a VPN due to side channel information disclosure. This could lead to remote information disclosure with no additional execution privileges needed. Use...

CVE-2024-57480

H3C N12 V100R005 contains a buffer overflow vulnerability due to the lack of length verification in the AP configuration function. Attackers who successfully exploit this vulnerability can cause the remote target device to crash or execute arbitrary commands by sending a POST request to /bin/webs...

PT-2025-3453

Name of the Vulnerable Software and Affected Versions H3C N12 version V100R005 Description The issue is due to a lack of length verification in the AP configuration function, leading to a buffer overflow. Attackers can exploit this by sending a POST request to "/bin/webs" to cause the remote targ...

The vulnerability in the Profile Name field of the software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network allows a attacker to perform XSS attacks.

The vulnerability of the Profile Name field in software for monitoring, managing, and configuring VigorAP access points and VigorSwitches in the DrayTek VigorConnect local network is related to the lack of security measures taken to protect the website structure. Exploiting this vulnerability cou...

CVE-2024-52592 Missing validation allows spoofed poll updates in Misskey

Misskey is an open source, federated social media platform. In affected versions missing validation in ApInboxService.update allows an attacker to modify the result of polls belonging to another user. No authentication is required, except for a valid signature from any actor on any remote instanc...

PT-2025-9945

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential NULL dereference issue has been identified in the Linux kernel, specifically in the cfg80211 tests. The kunit kzalloc function may return NULL, and without a proper NULL chec...

PT-2024-9473 · Advantech · Advantech Eki-6333Ac-2G +1

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: A security issue was discovered in the "scan ap" API of Advantech's...

MAL-2024-10879 Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

Malicious code in ap-components-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b75060f671ee7ecddf3938775343212154c5eb91d9e4fba478a1f6062457b9c8 The OpenSSF Package Analysis project identified 'ap-components-react' @ 3.15.9 npm as malicious. It is considered malicious because: - The packa...

CVE-2024-53074

In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwifi: mvm: don't leak a link on AP removal Release the link mapping resource in AP removal. This impacted devices that do not support the MLD API 9260 and down. On those devices, we couldn't start the AP again after the ...