4356 matches found
CVE-2019-10535
Improper validation for loop variable received from firmware can lead to out of bound access in WLAN function while iterating through loop in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...
CVE-2018-9393
In procfilewrite of drivers/misc/mediatek/connectivity/wlan/gen2/os/linux/glproc.c, there is a possible OOB write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2018-5903
Out of bounds read occurs due to improper validation of array while processing VDEV stop response from WLAN firmware in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9206, MDM9607, MDM9640, MDM9650, MSM8996AU...
CVE-2017-15832
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...
CVE-2018-11924
Improper buffer length validation in WLAN function can lead to a potential integer oveflow issue in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music in MDM9150, MDM920...
CVE-2025-21459 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing per STA profile in ML IE...
CVE-2025-21459 Buffer Over-read in WLAN Host Communication
Transient DOS while parsing per STA profile in ML IE...
CVE-2025-44847
TOTOLINK CA600-PoE V5.3c.6665B20180820 was found to contain a command injection vulnerability in the setWebWlanIdx function via the webWlanIdx parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2025-37744 wifi: ath12k: fix memory leak in ath12k_pci_remove()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kpciremove Kmemleak reported this error: unreferenced object 0xffff1c165cec3060 size 32: comm "insmod", pid 560, jiffies 4296964570 age 235.596s backtrace: kmemcacheallocnode+0x1f4/0x2c0...
CVE-2025-37744 wifi: ath12k: fix memory leak in ath12k_pci_remove()
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kpciremove Kmemleak reported this error: unreferenced object 0xffff1c165cec3060 size 32: comm "insmod", pid 560, jiffies 4296964570 age 235.596s backtrace: kmemcacheallocnode+0x1f4/0x2c0...
CVE-2025-22102
CVE-2025-22102 affects the Linux kernel Bluetooth btnxpuart driver. The issue causes a kernel panic during FW release when WLAN/BT firmware downloads occur in parallel and the hardware delivers only one bootloader signature; the driver enters FW download mode but, after a 60-second timeout, a rel...
CVE-2025-22102 Bluetooth: btnxpuart: Fix kernel panic during FW release
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix kernel panic during FW release This fixes a kernel panic seen during release FW in a stress test scenario where WLAN and BT FW download occurs simultaneously, and due to a HW bug, chip sends out only 1...
PT-2025-29010
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's Wi-Fi subsystem related to the ath12k driver. The issue involves potential corruption of nodes within the ar-arvifs list during WLAN recovery...
CVE-2025-21441
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21439
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer...
CVE-2025-21440
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-20664
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-27...
CVE-2025-20663
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-30...
