5162 matches found
Qualcomm Chipsets security vulnerabilities
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates when calling IOCTL calls from user space to set generic private commands in the WLAN driver, which may result in memory corruption if these commands are...
CVE-2024-43049: Improper Restriction of Operations within the Bounds of a Memory Buffer
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver...
PT-2024-30275 · Qualcomm · Qualcomm Windows Wlan Host
Name of the Vulnerable Software and Affected Versions: Qualcomm Windows WLAN Host affected versions not specified Description: The issue involves memory corruption that occurs when invoking IOCTL calls from user space to read diagnostic information of the target WLAN. This corruption happens due ...
CVE-2024-43050: Stack-based Buffer Overflow
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver...
CVE-2024-50371
A CWE-78 "Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection'" was discovered affecting the following devices manufactured by Advantech: EKI-6333AC-2G = 1.6.3, EKI-6333AC-2GD = v1.6.3 and EKI-6333AC-1GPO = v1.2.1. The vulnerability can be exploited by remote...
CVE-2017-15832
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...
CVE-2017-18153 Use After Free in WLAN
A race condition exists in a driver potentially leading to a use-after-free condition...
CVE-2017-18153 Use After Free in WLAN
A race condition exists in a driver potentially leading to a use-after-free condition...
CVE-2017-17772 Multiple buffer overread vulnerabilities in WLAN
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation...
CVE-2017-17772 Multiple buffer overread vulnerabilities in WLAN
In multiple functions that process 802.11 frames, out-of-bounds reads can occur due to insufficient validation...
CVE-2017-15832 Buffer overwrite due to improper input validation in WLAN host
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...
CVE-2017-15832 Buffer overwrite due to improper input validation in WLAN host
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...
PT-2024-10593
Name of the Vulnerable Software and Affected Versions WLAN host driver affected versions not specified Description The issue is related to a buffer overwrite in the WLAN host driver, which can be exploited by leveraging a compromised WLAN FW. Recommendations At the moment, there is no information...
CVE-2017-15832: Improper Input Validation
Buffer overwrite in the WLAN host driver by leveraging a compromised WLAN FW...
CVE-2024-50236
CVE-2024-50236 affects the Linux kernel’s ath10k wireless stack. It describes a memory leak in management TX where MSDU context memory was allocated but not freed on TX completion, with similar leaks in the cleanup path. The fix frees the memory during completion/cleanup and protects the mgmt_tx ...
CVE-2024-50236 wifi: ath10k: Fix memory leak in management tx
In the Linux kernel, the following vulnerability has been resolved: wifi: ath10k: Fix memory leak in management tx In the current logic, memory is allocated for storing the MSDU context during management packet TX but this memory is not being freed during management TX completion. Similar leaks a...
CVE-2024-34680
Use of implicit intent for sensitive communication in WlanTest prior to SMR Nov-2024 Release 1 allows local attackers to get sensitive information...
Samsung Mobile Devices security vulnerabilities
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices SMR Nov-2024 Release 1 prior to version 1, which stems from WlanTest contains a sensitive...
CVE-2024-45891
DrayTek Vigor3900 1.5.1.3 contains a post-authentication command injection vulnerability. This vulnerability occurs when the action parameter in cgi-bin/mainfunction.cgi is set to deletewlanprofile...