EUVD-2026-59488

In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte halbuf without validating the response length. A response exceeding...

CVE-2026-74341

CVE-2026-74341 : In the Linux kernel WiFi driver wcn36xx, the firmware response dispatcher copies HAL responses into a 4096-byte buffer without validating the length. This can cause a heap overflow when a response exceeds WCN36XX_HAL_BUF_SIZE. The issue is mitigated by a bounds check on the respo...