Lucene search
+L

4366 matches found

CVE
CVE
added 2024/12/02 10:18 a.m.72 views

CVE-2024-43049

CVE-2024-43049 describes memory corruption when user-space IOCTLs attempt to set a generic private command in a WLAN driver. The issue is reported across multiple feeds (NVD/Red Hat/CIRCL) and centers on the IOCTL path in the WLAN driver, with a high impact in CVSS terms (Local access, Low comple...

7.8CVSS7.9AI score0.00103EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/12/02 10:18 a.m.48 views

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

7.8CVSS0.00103EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 10:18 a.m.17 views

CVE-2024-43049 Improper Restriction of Operations within the Bounds of a Memory Buffer in WLAN Windows Host

Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...

7.8CVSS7.2AI score0.00103EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 10:18 a.m.19 views

CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

7.5CVSS6.9AI score0.00265EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 10:18 a.m.56 views

CVE-2024-33063 Integer Overflow or Wraparound in WLAN Host Communication

Transient DOS while parsing the ML IE when a beacon with common info length of the ML IE greater than the ML IE inside which this element is present...

7.5CVSS0.00265EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/02 4:15 a.m.8 views

CVE-2024-20138

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604...

7.5CVSS5.9AI score0.00282EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/02 4:15 a.m.18 views

CVE-2024-20137

In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00384543; Issue ID: MSV-1727...

7.5CVSS0.01223EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/02 4:15 a.m.26 views

CVE-2024-20138

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604...

7.5CVSS0.00282EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 3:07 a.m.22 views

CVE-2024-20138

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604...

0.00282EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 3:07 a.m.17 views

CVE-2024-20138

In wlan driver, there is a possible out of bound read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08998291; Issue ID: MSV-1604...

6.5AI score0.00282EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/02 3:07 a.m.70 views

CVE-2024-20138

CVE-2024-20138 concerns the WLAN driver in affected MediaTek MediaTek-based chipsets, where improper input validation can cause an out-of-bounds read. This leads to remote information disclosure without additional privileges and without user interaction. The issue is documented across multiple so...

7.5CVSS6.7AI score0.00282EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2024/12/02 3:07 a.m.54 views

CVE-2024-20137

The CVE-2024-20137 issue affects the WLAN driver in MediaTek chipsets, caused by improper handling of exceptional conditions that can trigger a client disconnection and remote denial of service without authentication or user interaction. The vulnerability has a CVSS 3.1 base vector of AV:N/AC:L/P...

7.5CVSS7.2AI score0.01223EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/02 3:07 a.m.17 views

CVE-2024-20137

In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00384543; Issue ID: MSV-1727...

7AI score0.01223EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/02 3:07 a.m.262 views

CVE-2024-20137

In wlan driver, there is a possible client disconnection due to improper handling of exceptional conditions. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00384543; Issue ID: MSV-1727...

0.01223EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/02 12:00 a.m.18 views

PT-2024-30275 · Qualcomm · Qualcomm Windows Wlan Host

Name of the Vulnerable Software and Affected Versions: Qualcomm Windows WLAN Host affected versions not specified Description: The issue involves memory corruption that occurs when invoking IOCTL calls from user space to read diagnostic information of the target WLAN. This corruption happens due ...

7.8CVSS7AI score0.00103EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/12/02 12:00 a.m.10 views

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates when calling IOCTL calls from user space to set generic private commands in the WLAN driver, which may result in memory corruption if these commands are...

7.8CVSS7AI score0.00103EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/26 11:22 a.m.10 views

CVE-2024-50371

A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote...

9.8CVSS5.9AI score0.01285EPSS
SaveExploits0References1
NVD
NVD
added 2024/11/26 9:15 a.m.26 views

CVE-2017-15832

Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...

8.4CVSS0.00115EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/26 8:55 a.m.26 views

CVE-2017-18153 Use After Free in WLAN

A race condition exists in a driver potentially leading to a use-after-free condition...

8.4CVSS0.001EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/26 8:55 a.m.12 views

CVE-2017-18153 Use After Free in WLAN

A race condition exists in a driver potentially leading to a use-after-free condition...

8.4CVSS7.1AI score0.001EPSS
SaveExploits0References1
Rows per page
Query Builder