CVE-2025-20681

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446...

PT-2025-28309 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28312 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write due to an incorrect bounds check in the wlan AP driver could lead to remote code execution with no additional execution privileges needed. User interaction is...

PT-2025-28310 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out of bounds write in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28308 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28315 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds read exists in the wlan AP driver due to an incorrect bounds check. This could lead to local information disclosure, requiring User execution privileges. No user...

PT-2025-33548

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's mwifiex driver related to the handling of disassociation frames when operating in concurrent Station STA and Access Point AP mode with host Machine...

TOTOLINK A3002RU和TOTOLINK A3002R 安全漏洞

TOTOLINK A3002RU and TOTOLINK A3002R are both products of China Gion Electronics TOTOLINK.TOTOLINK A3002RU is a wireless router product.TOTOLINK A3002R is a wireless router product. A buffer overflow vulnerability exists in the TOTOLINK A3002RU and TOTOLINK A3002R, which originates from the...

SUSE CVE-2022-50160

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in apflashinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50160 mtd: maps: Fix refcount leak in ap_flash_init

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in apflashinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50160

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in apflashinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a refcount leak in the apflashinit function...

PT-2025-26086 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically in the ap flash init function within the mtd maps component. The of find matching node function returns a no...

CVE-2025-6164

A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404. It has been classified as critical. This affects an unknown part of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

TOTOLINK EX1200T 安全漏洞

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK EX1200T version 4.1.2cu.5232B20210713, which originates from the parameter submit-url of the file /boafrm/formMultiAP in the HTTP POST Request Handler componen...

CVE-2025-20674

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303...

CVE-2025-20674

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303...

CVE-2025-20674

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303...

CVE-2025-20674

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303...

CVE-2025-20674

The CVE-2025-20674 entry concerns MediaTek wlan AP driver vulnerabilities in MediaTek chipsets, where a missing permission check allows injection of arbitrary packets. This can lead to remote escalation of privilege without extra execution privileges or user interaction. The issue is documented w...