5149 matches found
CVE-2025-22102 Bluetooth: btnxpuart: Fix kernel panic during FW release
In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix kernel panic during FW release This fixes a kernel panic seen during release FW in a stress test scenario where WLAN and BT FW download occurs simultaneously, and due to a HW bug, chip sends out only 1...
PT-2025-29010
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's Wi-Fi subsystem related to the ath12k driver. The issue involves potential corruption of nodes within the ar-arvifs list during WLAN recovery...
CVE-2025-21441
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21439
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer...
CVE-2025-21440
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-20664
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00406217; Issue ID: MSV-27...
CVE-2025-20663
In wlan AP driver, there is a possible information disclosure due to an uncaught exception. This could lead to remote proximal/adjacent information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00408868; Issue ID: MSV-30...
CVE-2025-21441
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21439
Memory corruption may occur while reading board data via IOCTL call when the WLAN driver copies the content to the provided output buffer...
CVE-2025-21441
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21440
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21448 Buffer Over-read in WLAN Firmware
Transient DOS may occur while parsing SSID in action frames...
CVE-2025-21448
CVE-2025-21448 involves a transient Denial of Service in Qualcomm WLAN firmware when parsing SSIDs in action frames. Affected component: WLAN firmware; root cause: parsing SSIDs in action frames leading to DoS. Impact: availability loss (CVSSv3.1 base score 7.5, Network attack, no user interactio...
CVE-2025-21448 Buffer Over-read in WLAN Firmware
Transient DOS may occur while parsing SSID in action frames...
CVE-2025-21441 Out-of-bounds Read in Windows WLAN Host
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21441 Out-of-bounds Read in Windows WLAN Host
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21441
CVE-2025-21441: Memory corruption when an IOCTL writes WLAN board data from user-space. The only concrete details provided in the connected sources relate to Fedora advisories for mingw-python-urllib3 that reference this CVE among others. Fedora advisories FEDORA-2026-2b6dfd7c83 and FEDORA-2026-8...
CVE-2025-21440 Out-of-bounds Read in Windows WLAN Host
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver...
CVE-2025-21440
CVE-2025-21440 refers to a memory corruption vulnerability in Qualcomm WLAN driver code triggered by an IOCTL call from user-space when writing board data. The issue affects Qualcomm chipsets/WLAN components and is described with a CVSS v3.1 base score of 7.8 (HIGH) with local attack vector, low ...