1379 matches found
CVE-2024-33014
CVE-2024-33014 affects Qualcomm WLAN components; description: Transient Denial of Service occurs while parsing ESP Information Elements from beacon/probe response frames. CVSS v3.1 base score 7.5 (Network, Low complexity, No privileges, User interaction none; AvailabilityImpact: High). Connected ...
CVE-2024-33014 Buffer Over-read in WLAN Host
Transient DOS while parsing ESP IE from beacon/probe response frame...
CVE-2024-33013
CVE-2024-33013 describes a transient denial-of-service affecting Qualcomm WLAN-related components. Public records here indicate the vulnerability occurs when a driver accesses ML IE memory and the offset is incremented beyond the ML IE length, potentially causing a DoS condition. Affected items i...
CVE-2024-33013 Buffer Over-read in WLAN Host
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length...
CVE-2024-33013 Buffer Over-read in WLAN Host
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length...
CVE-2024-33011 Buffer Over-read in WLAN Host
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero...
CVE-2024-33011 Buffer Over-read in WLAN Host
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero...
CVE-2024-33011
CVE-2024-33011 is described as a transient Denial-of-Service condition in the WLAN Host module (Qualcomm) when parsing the MBSSID Information Element (IE) from beacon frames with a zero-length MBSSID IE. Public sources in the provided documents identify the issue as related to Qualcomm WLAN, with...
CVE-2024-33010 Use After Free in WLAN Host
Transient DOS while parsing fragments of MBSSID IE from beacon frame...
CVE-2024-33010 Use After Free in WLAN Host
Transient DOS while parsing fragments of MBSSID IE from beacon frame...
CVE-2024-33010
CVE-2024-33010 is a Use-After-Free in the WLAN Host path that causes a transient Denial of Service when parsing MBSSID IE fragments in beacon frames on Qualcomm chipsets. Affected component is WLAN in Qualcomm WLAN/Host stack; root cause is a use-after-free condition. Impact is Denial of Service ...
CISA Adds Twilio Authy and IE Flaws to Exploited Vulnerabilities List
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two security flaws to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerabilities are listed below - CVE-2012-4792 CVSS score: 9.3 - Microsoft Internet Explorer Use-After-Fr...
archive.sphere17.ie Cross Site Scripting vulnerability OBB-3944794
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2024-21466
Information disclosure while parsing sub-IE length during new IE generation...
CVE-2024-21457
INformation disclosure while handling Multi-link IE in beacon frame...
CVE-2024-21466 Integer Underflow (Wrap or Wraparound) in WLAN Host Communication
Information disclosure while parsing sub-IE length during new IE generation...
CVE-2024-21466
CVE-2024-21466 refers to an information-disclosure vulnerability in Qualcomm WLAN host communication. Affected: Qualcomm chipsets with WLAN subcomponents; issue arises while parsing the length of sub-IE during new IE generation, enabling partial information disclosure. Public sources (including N...
CVE-2024-21466 Integer Underflow (Wrap or Wraparound) in WLAN Host Communication
Information disclosure while parsing sub-IE length during new IE generation...