Lucene search
+L

8 matches found

OSV
OSV
•added 2023/08/14 7:15 p.m.•12 views

CVE-2023-29468

The Texas Instruments TI WiLink WL18xx MCP driver does not limit the number of information elements IEs of type XCCEXT1IEID or XCCEXT2IEID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote code...

9.8CVSS6.3AI score0.1012EPSS
SaveExploits0References1
Prion
Prion
•added 2023/08/14 7:15 p.m.•22 views

Buffer overflow

The Texas Instruments TI WiLink WL18xx MCP driver does not limit the number of information elements IEs of type XCCEXT1IEID or XCCEXT2IEID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote code...

7.5CVSS9.7AI score0.1012EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/08/14 12:00 a.m.•35 views

CVE-2023-29468

The Texas Instruments TI WiLink WL18xx MCP driver does not limit the number of information elements IEs of type XCCEXT1IEID or XCCEXT2IEID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote code...

10AI score0.1012EPSS
SaveExploits0References1
CVE
CVE
•added 2023/08/14 12:00 a.m.•73 views

CVE-2023-29468

The vulnerability CVE-2023-29468 affects TI WiLink WL18xx MCP driver in WILINK8-WIFI-MCP8 versions 8.5_SP3 and earlier. The root cause is that the driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID parsed in a management frame, allowing a spe...

9.8CVSS9.8AI score0.1012EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/08/14 12:00 a.m.•3 views

CVE-2023-29468: Buffer Copy without Checking Size of Input

The Texas Instruments TI WiLink WL18xx MCP driver does not limit the number of information elements IEs of type XCCEXT1IEID or XCCEXT2IEID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote code...

9.8CVSS8.8AI score0.1012EPSS
SaveExploits0References3
CVE
CVE
•added 2019/11/13 3:06 p.m.•61 views

CVE-2019-15948

CVE-2019-15948 affects Texas Instruments CC256x and WL18xx dual‑mode Bluetooth controllers. The issue occurs when LE scan mode is used, allowing a malformed Bluetooth Low Energy advertising packet to trigger a buffer overflow, leading to denial of service and potentially arbitrary code execution....

8.8CVSS9AI score0.0253EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
•added 2019/11/13 3:06 p.m.•33 views

CVE-2019-15948

Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause a denial of service or potentially execute arbitrary code. This affects...

9.1AI score0.0253EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/13 12:00 a.m.•6 views

CVE-2019-15948: Buffer Copy without Checking Size of Input

Texas Instruments CC256x and WL18xx dual-mode Bluetooth controller devices, when LE scan mode is used, allow remote attackers to trigger a buffer overflow via a malformed Bluetooth Low Energy advertising packet, to cause a denial of service or potentially execute arbitrary code. This affects...

8.8CVSS8.5AI score0.0253EPSS
SaveExploits0References2
Rows per page
Query Builder