CVE-2023-32806

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589...

CVE-2023-32806

In wlan driver, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441589; Issue ID: ALPS07441589...

CVE-2023-20820

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189...

CVE-2023-20820

The CVE-2023-20820 entry concerns MediaTek wlan service where improper input validation enables a command injection vulnerability, potentially allowing remote code execution with system privileges and no user interaction required. Affected component: wlan service; root cause: input validation fla...

CVE-2023-20820

In wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00244189; Issue ID: WCNCR00244189...

PT-2023-21806 · Wlan Fw · Wlan Fw

Name of the Vulnerable Software and Affected Versions: WLAN FW affected versions not specified Description: The issue is related to memory corruption in WLAN FW when processing command parameters from untrusted WMI payload. Recommendations: At the moment, there is no information about a newer...

PT-2023-21808 · Wlan Hal · Wlan Hal

Name of the Vulnerable Software and Affected Versions: WLAN HAL affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when processing the devIndex from an untrusted WMI payload. This can lead to potential security risks. There is no information...

PT-2023-24138 · Qualcomm · Qualcomm Snapdragon Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Chipsets affected versions not specified Description: The issue is related to a Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. There is no information provided about the estimated...

PT-2023-21812 · Qualcomm · Qualcomm Snapdragon Processors

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Processors affected versions not specified Description: The issue is related to memory corruption in the WLAN HAL when passing command parameters through WMI interfaces. This can potentially lead to security risks. There i...

PT-2023-24037 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible out of bounds write in the wlan driver due to improper input validation. This could lead to local escalation of privilege with System execution...

PT-2023-24038 · Unknown · Wlan Service

Name of the Vulnerable Software and Affected Versions: wlan service affected versions not specified Description: In the wlan service, there is a possible out of bounds read due to improper input validation. This could lead to local information disclosure with System execution privileges needed...

PT-2023-17642 · Unknown · Wlan Service

Name of the Vulnerable Software and Affected Versions: wlan service affected versions not specified Description: In the wlan service, there is a possible command injection due to improper input validation. This could lead to remote code execution with System execution privileges needed. User...

The vulnerability of the /userRpm/WlanSecurityRpm component of TP-Link router software, including models TL-WR940N, TL-WR941N, and TL-WR841N, allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the /userRpm/WlanSecurityRpm component of TP-Link’s router software, including models TL-WR940N, TL-WR941N, and TL-WR841N, is related to buffer overflow vulnerabilities. Exploiting this vulnerability allows an attacker to execute arbitrary code or cause system failures remote...

New "Whiffy Recon" Malware Triangulates Infected Device Location via Wi-Fi Every Minute

The SmokeLoader malware is being used to deliver a new Wi-Fi scanning malware strain called Whiffy Recon on compromised Windows machines. "The new malware strain has only one operation. Every 60 seconds it triangulates the infected systems' positions by scanning nearby Wi-Fi access points as a da...

Huawei HarmonyOS out-of-bounds write vulnerability (CNVD-2023-64092)

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from an out-of-bounds write vulnerability, which stems from a parameter out-of-bounds read/write in the WLAN module. An attacker can...

CVE-2023-21649

Memory corruption in WLAN while running doDriverCmd for an unspecific command...

Memory corruption

Memory corruption in WLAN while running doDriverCmd for an unspecific command...

CVE-2023-21649 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command...

CVE-2023-21649 Buffer Copy Without Checking Size of Input (`Classic Buffer Overflow`) in WLAN

Memory corruption in WLAN while running doDriverCmd for an unspecific command...

CVE-2023-21649

CVE-2023-21649 involves memory corruption in the WLAN component of Qualcomm chipsets, triggered by an improper handling of commands in the doDriverCmd function. The related enrichment describes this as a classic buffer overflow (Buffer Copy Without Checking Size of Input) in WLAN. Impact is high ...