1559 matches found
CVE-2023-43553 Use of Out-of-range Pointer Offset in WLAN HOST
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE...
CVE-2023-43552 Use After Free in WLAN Host Communication
Memory corruption while processing MBSSID beacon containing several subelement IE...
CVE-2023-43552
CVE-2023-43552 corresponds to a memory corruption flaw in Qualcomm WLAN chipsets when processing MBSSID beacons that contain multiple IE subelements. The vulnerability affects the WLAN subsystem and is rooted in memory handling during MBSSID beacon processing, with CVSS v3.1 base metrics (Network...
CVE-2023-43552 Use After Free in WLAN Host Communication
Memory corruption while processing MBSSID beacon containing several subelement IE...
Qualcomm Chipsets Security Vulnerability
Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from memory corruption when parsing beacon/probe response frames when the AP sends more supported links in MLIE...
PT-2024-13126 · Qualcomm · Snapdragon +131
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves memory corruption that occurs while parsing a beacon or probe response frame. This happens when an Access Point AP sends more support...
CVE-2019-13717
creationtimestamp| type| source ---|---|--- 2024-02-27 12:11:19+00:00| seen| https://t.me/ctinow/194288...
CVE-2022-23088
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
CVE-2022-23088
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
Heap overflow
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
CVE-2022-23088 802.11 heap buffer overflow
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
CVE-2022-23088 802.11 heap buffer overflow
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer. While a FreeBSD Wi-Fi client is in scanning mode i.e., not associated with a SSID a malicious beacon frame may overwrite kernel memory, leading to remote code...
CVE-2022-23088
CVE-2022-23088 affects FreeBSD’s net80211 802.11 beacon handling. The issue is a heap-buffer overflow caused by not validating the length of the IEEE 802.11s Mesh ID before copying it to a heap buffer, which can allow remote code execution when a FreeBSD Wi‑Fi client is in scanning mode and proce...
edmondsbeacon.com Cross Site Scripting vulnerability OBB-3852195
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2023-43520
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...
Design/Logic Flaw
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...
Memory corruption
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...
CVE-2023-43533
CVE-2023-43533 concerns a transient DoS in WLAN firmware on Qualcomm chipsets when a received beacon’s length is shorter than the 802.11 beacon frame. Multiple sources document the issue with the same description, indicating the WLAN firmware is the affected component and the root cause relates t...
CVE-2023-43520
CVE-2023-43520 is a memory corruption issue in Qualcomm WLAN components, arising when an Access Point includes a TID-to-link mapping Information Element in beacons and a station parses it. The vulnerability is documented across multiple sources (NVD/NVIDIA CVE entry, Red Hat advisory) with a base...