328 matches found
CVE-2023-33105 Configuration Issue in WLAN Host and Firmware
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number...
CVE-2023-43534 Use of Out-of-range Pointer Offset in WLAN HOST
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point...
CVE-2023-43534 Use of Out-of-range Pointer Offset in WLAN HOST
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point...
CVE-2023-43520 Stack-based Buffer Overflow in WLAN HOST
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...
CVE-2023-43520 Stack-based Buffer Overflow in WLAN HOST
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...
CVE-2023-33116 Buffer over-read without Checking Size of Input in WLAN Host
Transient DOS while parsing ieee80211parsemscsie in WIN WLAN driver...
CVE-2023-33116 Buffer over-read without Checking Size of Input in WLAN Host
Transient DOS while parsing ieee80211parsemscsie in WIN WLAN driver...
CVE-2023-33083
Memory corruption in WLAN Host while processing RRM beacon on the AP...
CVE-2023-28580
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache...
CVE-2023-28579
Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length...
Memory corruption
Memory corruption in WLAN Host while processing RRM beacon on the AP...
Memory corruption
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache...
Memory corruption
Memory Corruption in WLAN Host while deserializing the input PMK bytes without checking the input PMK length...
CVE-2023-33083
CVE-2023-33083 concerns memory corruption in the WLAN Host when processing RRM beacons on the AP, attributed to a classic buffer overflow (buffer copy without checking size). Reported across multiple sources tied to Qualcomm chipsets, with CVSSv3.1 base score 9.8 (CRITICAL), indicating network-le...
CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
Memory corruption in WLAN Host while processing RRM beacon on the AP...
CVE-2023-33083 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
Memory corruption in WLAN Host while processing RRM beacon on the AP...
CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...
CVE-2023-33082 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN Host
Memory corruption while sending an Assoc Request having BTM Query or BTM Response containing MBO IE...
CVE-2023-28580 Buffer Copy Without Checking Size of Input in WLAN Host
Memory corruption in WLAN Host while setting the PMK length in PMK length in internal cache...
CVE-2023-28580
CVE-2023-28580 concerns Qualcomm chipsets’ WLAN Host memory corruption when setting the PMK length in the internal cache. The vulnerability description across sources consistently states memory corruption in the WLAN Host related to PMK length handling in the internal cache, with CVSS signals ind...