45 matches found
CVE-2026-68472 wifi: cfg80211: validate EHT MLE before MLD ID read
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211gennewie copies ML probe response elements from the parent frame when the parent EHT multi-link element has an MLD ID matching the nontransmitted BSSID index. The code...
EUVD-2026-59093
In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211mlecommonsize uses the first common-info octet as the common information length for all known MLE types. However, ieee80211mlesizeok only validates that octet for Basic,...
PT-2026-72184
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: validate EHT MLE before MLD ID read cfg80211 gen new ie copies ML probe response elements from the parent frame when the parent EHT multi-link element has an MLD ID matching the nontransmitted BSSID index. The cod...
PT-2026-72183
In the Linux kernel, the following vulnerability has been resolved: wifi: ieee80211: validate MLE common info length ieee80211 mle common size uses the first common-info octet as the common information length for all known MLE types. However, ieee80211 mle size ok only validates that octet for...
CVE-2026-64515
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element MLE is contained in a non-transmitted profile, the defragmentation routine is called with a pointer to the defragmented copy, but the original...
CVE-2026-64515
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: fix MLE defragmentation If either reconf or EPCS multi-link element MLE is contained in a non-transmitted profile, the defragmentation routine is called with a pointer to the defragmented copy, but the original...
SUSE CVE-2026-34714
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...
EUVD-2026-17160
Vim before 9.2.0272 allows code execution that happens immediately upon opening a crafted file in the default configuration, because %expr injection occurs with tabpanel lacking PMLE...
ThreadFuzzer: Fuzzing Framework for Thread Protocol
With the rapid growth of IoT, secure and efficient mesh networking has become essential. Thread has emerged as a key protocol, widely used in smart-home and commercial systems, and serving as a core transport layer in the Matter standard. This paper presents ThreadFuzzer, the first dedicated...
Malicious code in mle (npm)
The package mle was found to contain malicious code...
MAL-2025-26525 Malicious code in mle (npm)
The package mle was found to contain malicious code...
CVE-2024-13667
The Uncode theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mle-description’ parameter in all versions up to, and including, 2.9.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level acces...
CVE-2024-13667 Uncode <= 2.9.1.6 - Authenticated (Subscriber+) Stored Cross-Site Scripting via mle-description
The Uncode theme for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘mle-description’ parameter in all versions up to, and including, 2.9.1.6 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Subscriber-level acces...
MAL-2024-1108 Malicious code in mle-py-connector (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91bb80bd9d7444d113ce05b2d2abac925c10e36a23ae955fd9ebd682cd046bd1 The OpenSSF Package Analysis project identified 'mle-py-connector' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...
Malicious code in mle-py-connector (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91bb80bd9d7444d113ce05b2d2abac925c10e36a23ae955fd9ebd682cd046bd1 The OpenSSF Package Analysis project identified 'mle-py-connector' @ 5.9.1 pypi as malicious. It is considered malicious because: - The package...
OSV-2020-721 Stack-buffer-overflow in ot::NetworkData::NetworkData::GetNextOnMeshPrefix
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13334 Crash type: Stack-buffer-overflow WRITE Crash state: ot::NetworkData::NetworkData::GetNextOnMeshPrefix ot::Dhcp6::Dhcp6Client::UpdateAddresses ot::Mle::Mle::HandleStateChanged...
OSV-2020-690 UNKNOWN READ in ot::Coap::CoapBase::RemoveResource
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13369 Crash type: UNKNOWN READ Crash state: ot::Coap::CoapBase::RemoveResource ot::MeshCoP::BorderAgent::Stop ot::Mle::Mle::SetStateDetached...
OSV-2020-496 Stack-buffer-overflow in ot::Mle::Mle::HandleParentResponse
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=15382 Crash type: Stack-buffer-overflow READ Crash state: ot::Mle::Mle::HandleParentResponse ot::Mle::Mle::HandleUdpReceive ot::Ip6::Udp::HandleMessage...
OSV-2020-369 UNKNOWN READ in ot::TimerScheduler::Remove
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=13383 Crash type: UNKNOWN READ Crash state: ot::TimerScheduler::Remove ot::Mle::Mle::Stop otThreadSetEnabled...
OSV-2020-258 Stack-buffer-overflow in ot::Message::Write
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=19338 Crash type: Stack-buffer-overflow READ 11 Crash state: ot::Message::Write ot::Message::Append ot::Mle::Mle::AppendResponse...