bcm4360-wpa3

WPA3-SAE + 802.11w on the Broadcom BCM4360 closed wl blob Apple/Broadcom never gave the BCM4360 14e4:43a0 WPA3. Its only Linux driver is the closed broadcom-sta wl blob; brcmfmac can't drive it. This adds WPA3-SAE + full 802.11w PMF to that closed blob — entirely from host software, no firmware...

WPAxFuzz

!Contributorscontributors-shieldcontributors-url !Stargazersstars-shieldstars-url !Forksforks-shieldforks-url !Issuesissues-shieldissues-url !MIT Licenselicense-shieldlicense-url A full-fledged Wi-Fi Fuzzer Report Bug · Request Feature Table of Contents 1. About The Project 2. Fuzz Management and...

easy-exploits

easy-exploits The current repository contains exploits of different CVE IDs that were identified in the past by me CVE-2021-37910, CVE-2021-40288, CVE-2021-41435, CVE-2021-41436, CVE-2021-41437, CVE-2021-41441, CVE-2021-41442, CVE-2021-41445, CVE-2021-41449, CVE-2021-41450, CVE-2021-41451,...

CVE-2024-20137

CVE-2024-20137 Python code for expoiting the vulnerability in wlan driver of MediaTek SOCs MT6890, MT7622, MT7915, MT7916, MT7981, MT7986 MediaTek: https://corp.mediatek.com/product-security-bulletin/December-2024 NIST: https://nvd.nist.gov/vuln/detail/CVE-2024-20137 About the code This code is...

Astra Linux – Vulnerability in wpa

Implementations of SAE in hostapd before version 2.10, and wpasupplicant before version 2.10, are vulnerable to side-channel attacks due to cache access patterns. NOTE: This issue exists due to an incomplete fix for CVE-2019-9494...

Fast and Secure Simultaneous Authentication of Equals for WPA3

The Simultaneous Authentication of Equals SAE protocol, introduced in WPA3, provides robust protection against offline dictionary attacks against a network Pre-Shared Key PSK and also protection of session keys from other people knowing that PSK. However, its high computational cost for the...

kernel: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. A remote attacker, by sending a specially crafted short authentication frame during the SAE Simultaneous Authentication of Equals authentication exchange, could trigger a heap overflow. This vulnerability allows for potential arbitrary...

SUSE CVE-2026-72003

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

Astra Linux – Vulnerability in Linux 5.10

In the Linux kernel, the following vulnerability has been resolved: Wifi: brcmfnotifyauthframerx – A heap overflow occurs when a short auth frame is processed. The function brcmfnotifyauthframerx retrieves the frame length from the firmware event and copies the frame body by subtracting the offse...

Autonomous Cyber Defense in Connected Vehicles: A Multi-Agent Approach to V2X Security

A connected vehicle has roughly 100 milliseconds to decide whether an incoming Basic Safety Message is real or fabricated. If a false emergency braking alert reaches the planning pipeline in time, the car brakes - a safety failure triggered by a security failure. Existing intrusion detection...

CVE-2026-72003

A flaw was found in the Linux kernel's brcmfmac Wi-Fi driver. A remote attacker, by sending a specially crafted short authentication frame during the SAE Simultaneous Authentication of Equals authentication exchange, could trigger a heap overflow. This vulnerability allows for potential arbitrary...

CVE-2026-72003

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

UBUNTU-CVE-2026-72003

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: cyw: fix heap overflow on a short auth frame brcmfnotifyauthframerx takes the frame length from the firmware event and copies the frame body with the management header offset subtracted: u32 mgmtframelen = e-datal...

CVE-2026-72003

CVE-2026-72003 observable in the Linux kernel affects the brcmfmac cyw WLAN driver. The issue arises in brcmf_notify_auth_frame_rx(), where the code derives mgmt_frame_len from e->datalen and subtracts offsetof(struct ieee80211_mgmt, u). If mgmt_frame_len is smaller than the 24-byte header off...

PT-2026-72192

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A remotely triggered heap overflow exists in the brcmfmac module. The brcmf notify auth frame rx function calculates the frame length by subtracting the management header offset from the...

Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. Missing network context...

SUSE-SU-2026:3490-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: - CVE-2025-24912: hostapd RADIUS authentication of wi-fi devices allows a user in between the hostapd and the RADIUS server to inject crafted RADIUS packets and force RADIUS authentications to fail bsc1239461. - Missing network context...

SUSE-SU-2026:23072-1 Security update for wpa_supplicant

This update for wpasupplicant fixes the following issues: Security issues fixed: - CVE-2025-24912: RADIUS pending request dropping bsc1239461. - CVE-2026-58374: missing bounds check in AP-mode Wi-Fi 7 IEEE 802.11be MLO association request processing allows an unauthenticated user to send a crafte...

deeplens-sae (>=0.1.0, <=0.1.1), wikilangs (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-66007 via datasets (4.4.2)

datasets PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - deeplens-sae =0.1.0, =0.1.1, =0.1.3 Source cves: CVE-2026-66007 Source advisory: OSV:GHSA-379C-QX7V-6H59...

deeplens-sae (>=0.1.0, <=0.1.1), wikilangs (>=0.1.1, <=0.1.3) potentially affected by CVE-2026-66007 via datasets (4.4.2)

datasets PYPI version 4.4.2 is affected by a known vulnerability. The following packages have a transitive dependency on datasets and may be impacted: - deeplens-sae =0.1.0, =0.1.1, =0.1.3 Source cves: CVE-2026-66007 Source advisory: OSV:PYSEC-2026-3716...