CVE-2023-52530

In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix potential key use-after-free When ieee80211keylink is called by ieee80211gtkrekeyadd but returns 0 due to KRACK protection identical key reinstall, ieee80211gtkrekeyadd will still return a pointer into the key...

kernel: Linux kernel: Denial of Service in ath9k Wi-Fi driver due to URB memory leak

A flaw was found in the Linux kernel's ath9k Wi-Fi driver. This memory leak vulnerability occurs because Universal Serial Bus USB request blocks URBs are allocated but not properly freed when certain conditions are met during USB device handling. A local attacker could exploit this by triggering...

Pixel Update Bulletin—November 2023Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Update Bulletin contains details of security vulnerabilities and functional improvements affecting supported Pixel devices Google devices. For Google devices, security patch levels of 2023-11-01 or later address all issues in this bulletin and all issues in the November 2023 Android...

The vulnerability of the mDNSResponder component in operating systems such as watchOS, iOS, iPadOS, and tvOS allows a hacker to track a device based on its MAC address via Wi-Fi.

The vulnerability of the mDNSResponder component in operating systems such as watchOS, iOS, iPadOS, and tvOS is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to track a device based on its MAC address via Wi-Fi...

Ford says it’s safe to drive its cars with a WiFi vulnerability

Ford has released information about a buffer overflow vulnerability in its SYNC 3 infotainment system. Ford learned from a supplier that a security researcher had discovered a vulnerability in the Wi-Fi software driver supplied for use in the SYNC 3 infotainment system available on some Ford and...

CVE-2022-32666

In Wi-Fi, there is a possible low throughput due to misrepresentation of critical information. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: GN20220829014; Issue ID: GN20220829014...

kernel: Denial of service in beacon protection for P2P-device

A flaw was found in P2P-Device in wifi in ieee80211rxhdecrypt in net/mac80211/rx.c in the Linux kernel, leading to a denial of service...

CVE-2023-20662

In wlan, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07560765; Issue ID: ALPS07560765...

SUSE CVE-2017-13084

Wi-Fi Protected Access WPA and WPA2 allows reinstallation of the Station-To-Station-Link STSL Transient Key STK during the PeerKey handshake, allowing an attacker within radio range to replay, decrypt, or spoof frames...

PT-2022-24709 · Zte · Zte Mf286R

Name of the Vulnerable Software and Affected Versions: ZTE MF286R affected versions not specified Description: The issue is related to a buffer overflow vulnerability due to lack of input validation on parameters of the wifi interface. An authenticated attacker could exploit this to perform a...

GSD-2022-1007392 wifi: brcmfmac: fix invalid address access when enabling SCAN log level

wifi: brcmfmac: fix invalid address access when enabling SCAN log level This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.220 by commit...

GSD-2022-1006036 wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965_rs_fill_link_cmd()

wifi: iwlegacy: 4965: fix potential off-by-one overflow in il4965rsfilllinkcmd This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.211 by commi...

PT-2022-33223 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.8 Description: The issue is related to the wifi mac80211 component in IBSS mode. When the state is disconnected, the CSA should not be finalized. The actual impact and attack plausibility have not yet been...

CVE-2022-36516

H3C GR-1200W MiniGRW1A0V100R006 was discovered to contain a stack overflow via the function apversioncheck...

Tenda AC15 Buffer Overflow Vulnerability (CNVD-2022-75823)

Tenda AC15 is a wireless router from Tenda, China. Tenda AC15 is vulnerable to a buffer overflow vulnerability caused by improper boundary checking of the WifiBasicSet function. A remote attacker could exploit this vulnerability to overflow the buffer and execute arbitrary code on the system...

TCL LinkHub Mesh Wi-Fi 安全漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL. TCL LinkHub Mesh Wi-Fi confctlsetguestwlan suffers from a denial of service vulnerability that can be exploited by attackers to cause a denial of service...

TCL LinkHub Mesh Wi-Fi 缓冲区错误漏洞

TCL LinkHub Mesh Wi-Fi is a router from TCL. A buffer error vulnerability exists in TCL LinkHub Mesh Wi-Fi version MS1G0001.0014, which stems from a stack-based buffer overflow vulnerability in the confer ucloudaddnodenew function...

SAMSUNG Mobile devices SemWifiApClient 安全漏洞

Samsung Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung SAMSUNG, including cell phones, tablets, and more. Samsung Mobile devices SemWifiApClient has an access control vulnerability that originates from improper access control in the sendDHCPACKBroadcast...

USN-5361-1 linux, linux-aws, linux-kvm, linux-lts-xenial vulnerabilities

It was discovered that the VFIO PCI driver in the Linux kernel did not properly handle attempts to access disabled memory spaces. A local attacker could use this to cause a denial of service system crash. CVE-2020-12888 Mathy Vanhoef discovered that the Linux kernel’s WiFi implementation did not...

CVE-2021-39763

In Settings, there is a possible way to make the user enable WiFi due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid ID:...