CVE-2024-20029

In wlan firmware, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS08477406; Issue ID: MSV-1010...

CVE-2024-20019

CVE-2024-20019 concerns a memory leak in the wlan driver caused by improper input handling. The issue enables remote denial of service without privileges, with no user interaction required for exploitation. Patch WCNCR00351241 is identified (Issue MSV-1173). Connected sources reference MediaTek a...

CVE-2024-20019

In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00351241; Issue ID: MSV-1173...

CVE-2024-20019

In wlan driver, there is a possible memory leak due to improper input handling. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00351241; Issue ID: MSV-1173...

CVE-2024-20018

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00348479; Issue ID: MSV-1019...

CVE-2024-20018

CVE-2024-20018 affects the MediaTek WLAN driver. The issue is an out-of-bounds write caused by improper input validation, enabling local escalation of privilege with no additional execution privileges required and no user interaction needed. A patch is available (Patch ID: WCNCR00348479; Issue ID...

CVE-2024-20017

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation Patch ID: WCNCR00350938; Issue ID: MSV-1132...

CVE-2024-20017

CVE-2024-20017 affects MediaTek Wi‑Fi chipsets via the wappd/wlan path, where an out-of-bounds write caused by insufficient input validation can enable remote code execution without user interaction. The issue is observed in MediaTek’s wappd, with public reports indicating affected firmware/SDK v...

CVE-2024-20017

In wlan service, there is a possible out of bounds write due to improper input validation. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation Patch ID: WCNCR00350938; Issue ID: MSV-1132...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from improper validation of wlan driver inputs, which may result in out-of-bounds writes...

PT-2024-18504 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible memory leak in the wlan driver due to improper input handling. This could lead to a remote denial of service, and no additional execution privileges a...

[SECURITY] Fedora 39 Update: wpa_supplicant-2.10-9.fc39

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

CVE-2023-43533

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...

Design/Logic Flaw

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...

CVE-2023-43536 Buffer Over-read in WLAN Firmware

Transient DOS while parse fils IE with length equal to 1...

CVE-2023-43536 Buffer Over-read in WLAN Firmware

Transient DOS while parse fils IE with length equal to 1...

CVE-2023-43534 Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point...

CVE-2023-43534 Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point...

CVE-2023-43533 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...

CVE-2023-43533 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...