CVE-2019-9414

In wpasupplicant, there is a possible man in the middle vulnerability due to improper input validation of the basicConstraints field of intermediary certificates. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for...

CVE-2019-9414

CVE-2019-9414 affects wpa_supplicant on Android 10. The root cause is improper input validation of the basicConstraints field in intermediary certificates, enabling a remote information disclosure via a man‑in‑the‑middle scenario with no user interaction. Impact is partial confidentiality loss; n...