The vulnerability of the download_firmware() function in the drivers/bluetooth/hci_ll.c driver for Bluetooth devices in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the downloadfirmware function in the drivers/bluetooth/hcill.c file of the Bluetooth device driver for the Linux operating system is related to incomplete filtering of special elements. Exploiting this vulnerability could allow an attacker to cause a service failure...

CVE-2026-43069: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: hcill: Fix firmware leak on error path Smatch reports: drivers/bluetooth/hcill.c:587 downloadfirmware warn: 'fw' from requestfirmware not released on lines: 544. In downloadfirmware, if requestfirmware succeeds but the...

CVE-2024-34205

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the downloadfirmware function...

CVE-2024-34205

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the downloadfirmware function...

CVE-2024-34205: Improper Neutralization of Special Elements used in an OS Command

TOTOLINK CP450 v4.1.0cu.747B20191224 was discovered to contain a command injection vulnerability in the downloadfirmware function...

CVE-2024-34205

The TOTOLINK CP450 wireless bridge, specifically version 4.1.0cu.747_B20191224 , is susceptible to a command injection vulnerability within the download_firmware function. The root cause is the failure of this method to properly filter constructed command special characters and other malicious in...