6532 matches found
CVE-2026-12999: Missing Release of Memory after Effective Lifetime
The Infineon Airoc Wi-Fi driver's transmit callback airocmgmtsend in drivers/wifi/infineon/airocwifi.c allocates a netbuf from the fixed airocpool for every outbound packet. When whdnetworksendethernetdata returns a synchronous failure, the underlying WHD library does not take ownership of the...
PT-2026-79740
Name of the Vulnerable Software and Affected Versions Infineon Airoc Wi-Fi driver affected versions not specified Description A memory leak exists in the transmit callback airoc mgmt send within the drivers/wifi/infineon/airoc wifi.c file. The driver allocates a net buf from a fixed pool called...
CVE-2026-77812
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
EUVD-2026-63973
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
CVE-2026-77812 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
CVE-2026-77812
CVE-2026-77812 is a critical (CVSS 4.0: 9.4) vulnerability in DJI drones where DUML protocol messages transmitted over BLE are unencrypted . During a normal DJI Fly Wi-Fi connection or QuickTransfer mode, the drone's Wi-Fi PSK, SSID, and trusted session UUID are exposed in cleartext. A passive at...
CVE-2026-77812 Cleartext Exposure of DJI Drone Wi-Fi Credentials via BLE
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
CVE-2026-74554
A flaw was found in the Linux kernel's ath12k Wi-Fi driver. An out-of-bounds write vulnerability exists in the ath12kmacdppeercleanup function. This issue occurs due to incorrect indexing of a bitmap, leading to memory corruption adjacent to the bitmap. This could allow a malicious Wi-Fi peer to...
PT-2026-79388
Name of the Vulnerable Software and Affected Versions DJI Neo versions prior to 01.00.0400 DJI Neo 2 versions prior to 01.00.0500 DJI Flip versions prior to 01.00.1200 DJI Air 3 versions prior to 01.00.1600 DJI Air 3S versions prior to 01.00.1400 DJI Avata 2 versions prior to 01.00.0400 DJI Avata...
CVE-2026-77812: Missing Encryption of Sensitive Data
DJI drones transmit DUML DJI Universal Markup Language protocol messages over BLE Bluetooth Low Energy without encryption. When a client attempts to connect to the drone over Wi-Fi, or when the drone is switched to QuickTransfer mode, the DJI Fly application exchanges DUML messages with the drone...
CVE-2026-74411
A flaw was found in the Linux kernel's rtw89 Wi-Fi driver. An incorrect data type used for a scan index during Wi-Fi scanning on the 6GHz band can lead to an infinite loop. This can cause a kernel soft lockup, making the CPU unresponsive and ultimately leading to a system panic, effectively...
CVE-2026-74367
A flaw was found in the ath12k Wi-Fi driver of the Linux kernel. This vulnerability arises from inconsistent internal state management during error conditions in virtual device creation. If an error occurs, the driver may not properly clear its internal state, leading to resource issues. This cou...
CVE-2026-74368
A flaw was found in the Linux kernel's ath12k Wi-Fi driver. When processing Wi-Fi frames, an invalid NWIFI Network Wi-Fi header length during TKIP Temporal Key Integrity Protocol MIC Message Integrity Code verification can cause an early exit from a handling function. This prevents the associated...
CVE-2026-74322
A flaw was found in the Linux kernel's mt76 Wi-Fi driver. This vulnerability allows an attacker to trigger an invalid memory access when processing specific Wi-Fi frames. This can lead to a system crash, resulting in a Denial of Service DoS for affected systems...
CVE-2026-72004
A flaw was found in the Linux kernel's mac80211 Wi-Fi subsystem. This issue occurs when the system attempts to copy Wi-Fi band structures, and an error during this process causes a memory resource to not be properly released. This oversight leads to a memory leak within the kernel, which could...
espectre snapshot-dev
🛜 ESPectre 👻 Motion detection system based on Wi-Fi spectre analysis CSI, with native Home Assistant integration via ESPHome. !TIP New ML Detector : Neural network-based motion detection. No calibration required, runs on-device. This is an experimental feature, and feedback is welcome in the...
CVE-2026-68472
A flaw was found in the Linux kernel's cfg80211 Wi-Fi subsystem. A remote attacker, by operating a malicious Access Point AP, could send a specially crafted EHT Multi-Link Element MLE in an MBSSID beacon. This could cause the kernel to read beyond the intended memory boundary when processing the...
CVE-2026-68471
A flaw was found in the Wi-Fi IEEE 802.11 component of the Linux kernel. The ieee80211mlecommonsize function uses the first common-info octet as the length for all known MLE Management Link Establishment types. However, the ieee80211mlesizeok function did not properly validate this length for all...
