CVE-2025-20685

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to remote proximal/adjacent code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416226; Issue ID: MSV-3409...

CVE-2025-20689

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418048; Issue ID: MSV-3479...

CVE-2025-20691

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418039; Issue ID: MSV-3477...

CVE-2025-20692

In wlan AP driver, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00418040; Issue ID: MSV-3476...

CVE-2025-49604

For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented...

PT-2025-28941

Name of the Vulnerable Software and Affected Versions: Ameba-AIoT ameba-arduino-d versions prior to 3.1.9 ameba-rtos-d versions prior to commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a Description: A heap-based buffer overflow exists in the WLAN driver defragment function due to a lack of...

CVE-2025-49604

CVE-2025-49604 affects Realtek AmebaD devices (Ameba-AIoT ameba-arduino-d < 3.1.9; ameba-rtos-d

CVE-2025-49604

For Realtek AmebaD devices, a heap-based buffer overflow was discovered in Ameba-AIoT ameba-arduino-d before version 3.1.9 and ameba-rtos-d before commit c2bfd8216a1cbc19ad2ab5f48f372ecea756d67a on 2025/07/03. In the WLAN driver defragment function, lack of validation of the size of fragmented...

Qualcomm WLAN Software Vulnerability - Lenovo Support US

No description provided...

Qualcomm WLAN Software Vulnerability - Lenovo Support US

No description provided...

Qualcomm WLAN Firmware Buffer Over-read Vulnerabilities - Lenovo Support US

No description provided...

MediaTek WLAN Vulnerabilities - Lenovo Support US

No description provided...

MediaTek WLAN Vulnerability - Lenovo Support US

No description provided...

CVE-2025-27051

Memory corruption while processing command message in WLAN Host...

CVE-2025-21446

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests...

CVE-2025-27057 Buffer Over-read in WLAN Host

Transient DOS while handling beacon frames with invalid IE header length...

CVE-2025-27057 Buffer Over-read in WLAN Host

Transient DOS while handling beacon frames with invalid IE header length...

CVE-2025-27051 Double Free in Windows WLAN Host

Memory corruption while processing command message in WLAN Host...

CVE-2025-27051 Double Free in Windows WLAN Host

Memory corruption while processing command message in WLAN Host...

CVE-2025-27051

CVE-2025-27051 affects Qualcomm WLAN Host memory handling, with memory corruption occurring while processing a command message. The CVSS 3.1 vector (Local attack, Low complexity, Low privileges, no user interaction) yields a base score of 7.8 (High impact for confidentiality, integrity, and avail...