CVE-2024-53104 media: uvcvideo: Skip parsing frames of type UVC_VS_UNDEFINED in uvc_parse_format

In the Linux kernel, the following vulnerability has been resolved: media: uvcvideo: Skip parsing frames of type UVCVSUNDEFINED in uvcparseformat This can lead to out of bounds writes since frames of this type were not taken into account when calculating the size of the frames buffer in...

PT-2024-25091 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: WLAN affected versions not specified Description: The issue is related to a transient denial of service DOS that occurs while parsing a noninheritance IE of an Extension element in a beacon frame. This happens when the length of the IE is 2...

CVE-2024-21456 Buffer Over-read in WLAN HOST

Information Disclosure while parsing beacon frame in STA...

SUSE CVE-2024-36016

In the Linux kernel, the following vulnerability has been resolved: tty: ngsm: fix possible out-of-bounds in gsm0receive Assuming the following: - side A configures the ngsm in basic option mode - side B sends the header of a basic option mode frame with data length 1 - side A switches to advance...

CVE-2024-21477

CVE-2024-21477 is linked to Qualcomm WLAN firmware with a Transient DoS issue that occurs while parsing a protected 802.11az FTM frame. Connected sources describe a concrete technical detail: a Buffer Over-read in WLAN firmware related to FTM frame parsing. The vulnerability is associated with Qu...

PT-2024-18897 · Qualcomm · Qualcomm Snapdragon

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon affected versions not specified Description: The issue is related to a Transient Denial of Service DOS that occurs while parsing a protected 802.11az Fine Time Measurement FTM frame. This affects the parsing of specific...

PT-2023-24166 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in the WLAN Firmware that occurs while parsing WLAN beacon or probe-response frames. Recommendations: At the moment, there is...

CVE-2023-21661 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WLAN beacon or probe-response frame...

CVE-2023-21661 Buffer Over-read in WLAN Firmware

Transient DOS while parsing WLAN beacon or probe-response frame...

Information disclosure

Information disclosure due to buffer over-read in WLAN while parsing NMF frame...

Qualcomm 芯片缓冲区错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc. and is often fabricated on the surface of semiconductor wafers. A security vulnerability exists in the WLAN module of the Qualcomm chip that...

CVE-2022-34146 Improper input validation in WLAN Host

Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation...

CVE-2022-33271 Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while parsing NMF frame...

CVE-2022-33271 Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while parsing NMF frame...

PT-2023-13343 · Wlan Host · Wlan Host

Name of the Vulnerable Software and Affected Versions: WLAN Host affected versions not specified Description: The issue is related to a transient Denial of Service DOS caused by a buffer over-read in the WLAN Host while parsing frame information. Recommendations: At the moment, there is no...

CVE-2022-33283

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...

Information disclosure

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...

CVE-2022-33283 Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...

CVE-2022-33283 Buffer over-read in WLAN

Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check...

CVE-2022-33283

CVE-2022-33283 describes information disclosure via a buffer over-read in WLAN frame parsing caused by a missing frame length check. The issue is documented across multiple sources as affecting WLAN-related components, including Qualcomm closed-source components, with the vulnerability enabling p...