CVE-2024-33011: Buffer Over-read

Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero...

CVE-2024-33012: Buffer Over-read

Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with end of beacon...

kernel: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()

An integer overflow flaw was found in the Linux kernel's nl80211 wireless configuration interface in the MBSSID element parsing logic. A local user with CAPNETADMIN capability can trigger this issue by specifying 256 or more MBSSID elements through the nl80211 interface, causing the u8 counter...

CVE-2023-43552

Memory corruption while processing MBSSID beacon containing several subelement IE...

Memory corruption

Memory corruption while processing MBSSID beacon containing several subelement IE...

CVE-2023-43552 Use After Free in WLAN Host Communication

Memory corruption while processing MBSSID beacon containing several subelement IE...

CVE-2023-43552

CVE-2023-43552 corresponds to a memory corruption flaw in Qualcomm WLAN chipsets when processing MBSSID beacons that contain multiple IE subelements. The vulnerability affects the WLAN subsystem and is rooted in memory handling during MBSSID beacon processing, with CVSS v3.1 base metrics (Network...

CVE-2023-43552 Use After Free in WLAN Host Communication

Memory corruption while processing MBSSID beacon containing several subelement IE...

CVE-2023-43552: Use After Free

Memory corruption while processing MBSSID beacon containing several subelement IE...

PT-2024-13125

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue involves memory corruption that occurs while processing an MBSSID beacon containing several subelement IE. This suggests a problem with how...

CVE-2023-33015

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...

Design/Logic Flaw

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...

CVE-2023-33015

The CVE-2023-33015 entry describes a transient DoS in Qualcomm WLAN firmware caused by how MBSSID Information Elements are interpreted in a received beacon frame. Affected component: Qualcomm WLAN firmware/driver stack within Qualcomm-based devices. Root cause: buffer/parsing issue when processin...

CVE-2023-33015 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...

CVE-2023-33015: Buffer Over-read

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...

PT-2023-24138 · Qualcomm · Qualcomm Snapdragon Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Chipsets affected versions not specified Description: The issue is related to a Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. There is no information provided about the estimated...

ASB-A-253642087

In ieee80211parseelemscrc of util.c, there is a possible use after free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

GSD-2022-1007451 wifi: cfg80211/mac80211: reject bad MBSSID elements

wifi: cfg80211/mac80211: reject bad MBSSID elements This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.218 by commit...

GSD-2022-1007445 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.219 by commit...

GSD-2022-1007329 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.149 by commit...