207 matches found
Linux kernel 安全漏洞
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the lack of checking the frame length before accessing the management fields, potentially leading to...
Linux kernel 安全漏洞
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the mt7925macwritetxwi80211 function not checking the frame length, potentially leading to...
CVE-2026-1528
ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length. undici's ByteParser overflows internal math, ends up in an invalid state, and throws a fatal TypeError that terminates the process. Patches Patched in the undici version v7.24.0 and v6.24.0...
CVE-2019-2305
Out of bound access when reason code is extracted from frame data without validating the frame length in Snapdragon Auto, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM9206, MDM9607,...
CVE-2022-33279
Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length...
PT-2026-27728
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel’s wifi subsystem, specifically within the mt76 and mt7925 components. The issue involves a potential out-of-bounds access within the mt7925 mac write tx...
PT-2026-27680
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the mt76 module related to out-of-bounds access within the mt76 connac2 mac write txwi 80211 function. A check for frame length is insufficient,...
PT-2026-27690
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a flaw in the mt76 mt7996 module where a missing check for frame length could lead to an out-of-bounds access within the mt7996 mac write txwi 80211 function...
EUVD-2025-204760
wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kissrecbyte located in src/kissframe.c. When processing crafted KISS frames that reach the maximum allowed frame length MAXKISSLEN, the function...
CVE-2025-34457
wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kissrecbyte located in src/kissframe.c. When processing crafted KISS frames that reach the maximum allowed frame length MAXKISSLEN, the function...
UBUNTU-CVE-2025-34457
wb2osz/direwolf Dire Wolf versions up to and including 1.8, prior to commit 694c954, contain a stack-based buffer overflow vulnerability in the function kissrecbyte located in src/kissframe.c. When processing crafted KISS frames that reach the maximum allowed frame length MAXKISSLEN, the function...
CVE-2025-34457
CVE-2025-34457 affects wb2osz/direwolf (Dire Wolf) up to version 1.8, prior to commit 694c954. The issue is a stack-based buffer overflow in the function kiss_rec_byte() in src/kiss_frame.c when processing frames at MAX_KISS_LEN; it appends a terminating FEND byte without reserving space, causing...
DEBIAN-CVE-2025-65102
PJSIP is a free and open source multimedia communication library. Prior to version 2.16, Opus PLC may zero-fill the input frame as long as the decoder ptime, while the input frame length, which is based on stream ptime, may be less than that. This issue affects PJSIP users who use the Opus audio...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41091)
tun: add missing verification for short frame. Missing to check against the validity of the frame length in the tunxdpone path could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tunxdpone--ethtypetrans may access the Ethernet header although it can be less...
Siemens SCALANCE and RUGGEDCOM Devices Improper Input Validation (CVE-2024-41090)
tap: add missing verification for short frame. Missing to check against the validity of the frame length in the tapgetuserxdp path, which could cause a corrupted skb to be sent downstack. Even before the skb is transmitted, the tapgetuserxdp--skbsetnetworkheader may assume the size is more than...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989975)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989975 advisory. In the Linux kernel, the following vulnerability has been resolved: tun: add missing verification for short frame The cited commit missed to check against the validi...
Astra Linux – Vulnerability in Linux 6.12
In the Linux kernel, the following vulnerability has been resolved: virtio-net: xsk: rx: fix the frame’s length check When calling buftoxdp, the len argument represents the length of the frame data, excluding the length of the virtio header vi-hdrlen. We check that len is not greater than the...
PT-2025-42262
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the Linux kernel's CAN Controller Area Network subsystem, specifically within the hi311x driver. Sending a PF PACKET can bypass the CAN framework's logic and directly...