CVE-2025-20683

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416938; Issue ID: MSV-3444...

CVE-2025-20683

CVE-2025-20683 affects the wlan AP driver with an out-of-bounds write caused by an incorrect bounds check. Reported impact is local escalation of privilege with high confidentiality, integrity, and availability impact per CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The description indicates n...

CVE-2025-20681

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446...

CVE-2025-20681

CVE-2025-20681 affects the WLAN AP driver (MediaTek-anchored) with an out-of-bounds write caused by an incorrect bounds check. This enables local escalation of privilege with no user interaction required; attacker gains User-level execution. The issue is tied to patch WCNCR00416936 (MSV-3446). Mu...

CVE-2025-20681

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00416936; Issue ID: MSV-3446...

PT-2025-28312 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write due to an incorrect bounds check in the wlan AP driver could lead to remote code execution with no additional execution privileges needed. User interaction is...

PT-2025-28309 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28310 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: There is a possible out of bounds write in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-28315 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds read exists in the wlan AP driver due to an incorrect bounds check. This could lead to local information disclosure, requiring User execution privileges. No user...

PT-2025-28308 · Unknown · Wlan Ap Driver

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. Description: A possible out of bounds write exists in the wlan AP driver due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User...

PT-2025-33548

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A flaw exists in the Linux kernel's mwifiex driver related to the handling of disassociation frames when operating in concurrent Station STA and Access Point AP mode with host Machine...

TOTOLINK A3002RU和TOTOLINK A3002R 安全漏洞

TOTOLINK A3002RU and TOTOLINK A3002R are both products of China Gion Electronics TOTOLINK.TOTOLINK A3002RU is a wireless router product.TOTOLINK A3002R is a wireless router product. A buffer overflow vulnerability exists in the TOTOLINK A3002RU and TOTOLINK A3002R, which originates from the...

SUSE CVE-2022-50160

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in apflashinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50160 mtd: maps: Fix refcount leak in ap_flash_init

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in apflashinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

CVE-2022-50160

In the Linux kernel, the following vulnerability has been resolved: mtd: maps: Fix refcount leak in apflashinit offindmatchingnode returns a node pointer with refcount incremented, we should use ofnodeput on it when not need anymore. Add missing ofnodeput to avoid refcount leak...

PT-2025-26086 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A refcount leak issue has been identified in the Linux kernel, specifically in the ap flash init function within the mtd maps component. The of find matching node function returns a no...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a refcount leak in the apflashinit function...

CVE-2025-6164

A vulnerability was found in TOTOLINK A3002R 4.0.0-B20230531.1404. It has been classified as critical. This affects an unknown part of the file /boafrm/formMultiAP of the component HTTP POST Request Handler. The manipulation of the argument submit-url leads to buffer overflow. It is possible to...

TOTOLINK EX1200T 安全漏洞

TOTOLINK EX1200T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A buffer overflow vulnerability exists in the TOTOLINK EX1200T version 4.1.2cu.5232B20210713, which originates from the parameter submit-url of the file /boafrm/formMultiAP in the HTTP POST Request Handler componen...

CVE-2025-20674

In wlan AP driver, there is a possible way to inject arbitrary packet due to a missing permission check. This could lead to remote escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00413202; Issue ID: MSV-3303...