CVE-2024-33010 Use After Free in WLAN Host

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

CVE-2024-33010

CVE-2024-33010 is a Use-After-Free in the WLAN Host path that causes a transient Denial of Service when parsing MBSSID IE fragments in beacon frames on Qualcomm chipsets. Affected component is WLAN in Qualcomm WLAN/Host stack; root cause is a use-after-free condition. Impact is Denial of Service ...

CVE-2024-33010 Use After Free in WLAN Host

Transient DOS while parsing fragments of MBSSID IE from beacon frame...

kernel: wifi: nl80211: fix integer overflow in nl80211_parse_mbssid_elems()

An integer overflow flaw was found in the Linux kernel's nl80211 wireless configuration interface in the MBSSID element parsing logic. A local user with CAPNETADMIN capability can trigger this issue by specifying 256 or more MBSSID elements through the nl80211 interface, causing the u8 counter...

CVE-2023-43552

Memory corruption while processing MBSSID beacon containing several subelement IE...

Memory corruption

Memory corruption while processing MBSSID beacon containing several subelement IE...

CVE-2023-43552 Use After Free in WLAN Host Communication

Memory corruption while processing MBSSID beacon containing several subelement IE...

CVE-2023-43552

CVE-2023-43552 corresponds to a memory corruption flaw in Qualcomm WLAN chipsets when processing MBSSID beacons that contain multiple IE subelements. The vulnerability affects the WLAN subsystem and is rooted in memory handling during MBSSID beacon processing, with CVSS v3.1 base metrics (Network...

CVE-2023-43552 Use After Free in WLAN Host Communication

Memory corruption while processing MBSSID beacon containing several subelement IE...

CVE-2023-33015

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...

Design/Logic Flaw

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...

CVE-2023-33015

The CVE-2023-33015 entry describes a transient DoS in Qualcomm WLAN firmware caused by how MBSSID Information Elements are interpreted in a received beacon frame. Affected component: Qualcomm WLAN firmware/driver stack within Qualcomm-based devices. Root cause: buffer/parsing issue when processin...

CVE-2023-33015 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame...

PT-2023-24138 · Qualcomm · Qualcomm Snapdragon Chipsets

Name of the Vulnerable Software and Affected Versions: Qualcomm Snapdragon Chipsets affected versions not specified Description: The issue is related to a Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. There is no information provided about the estimated...

ASB-A-253642087

In ieee80211parseelemscrc of util.c, there is a possible use after free due to a logic error in the code. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...

GSD-2022-1007451 wifi: cfg80211/mac80211: reject bad MBSSID elements

wifi: cfg80211/mac80211: reject bad MBSSID elements This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.218 by commit...

GSD-2022-1007445 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.219 by commit...

GSD-2022-1007329 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.149 by commit...

GSD-2022-1007154 wifi: mac80211: fix MBSSID parsing use-after-free

wifi: mac80211: fix MBSSID parsing use-after-free This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.74 by commit...

PT-2022-35182 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.2 Description: The issue is related to a use-after-free error in the MBSSID parsing component of the mac80211 wifi module. The actual impact and attack plausibility have not yet been proven. Recommendations...