kernel: wifi: brcmfmac: slab-out-of-bounds read in brcmf_get_assoc_ies()

In the Linux kernel, the following vulnerability has been resolved: wifi: brcmfmac: slab-out-of-bounds read in brcmfgetassocies Fix a slab-out-of-bounds read that occurs in kmemdup called from brcmfgetassocies. The bug could occur when associnfo-reqlen, data from a URB provided by a USB device, i...

PT-2023-1707

Name of the Vulnerable Software and Affected Versions Linux Kernel affected versions not specified Description A slab-out-of-bound read problem was found in the brcmf get assoc ies function in the Linux Kernel. This issue could occur when assoc info-req len data is bigger than the size of the...

PT-2017-3641

Name of the Vulnerable Software and Affected Versions: Android kernel Description: The issue is related to the wl get assoc ies function in the wl cfg80211.c file of the Broadcom bcmdhd Wi-Fi driver in the Android operating system kernel. It involves an out of bounds write in memory due to an...