PT-2024-12388 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a Transient Denial of Service DOS in WLAN Firmware that occurs while parsing a BTM request. Recommendations: At the moment, there is no information about a new...

SLAM Attack: New Spectre-based Vulnerability Impacts Intel, AMD, and Arm CPUs

Researchers from the Vrije Universiteit Amsterdam have disclosed a new side-channel attack called SLAM that could be exploited to leak sensitive information from kernel memory on current and upcoming CPUs from Intel, AMD, and Arm. The attack is an end-to-end exploit for Spectre based on a new...

CVE-2023-33097

Transient DOS in WLAN Firmware while processing a FTMR frame...

CVE-2023-33098

Transient DOS while parsing WPA IES, when it is passed with length more than expected size...

CVE-2023-33089

Transient DOS when processing a NULL buffer while parsing WLAN vdev...

CVE-2023-33081

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

CVE-2023-33080

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

CVE-2023-33070

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

CVE-2023-33043

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...

CVE-2023-33042

Transient DOS in Modem after RRC Setup message is received...

CVE-2023-33044

Transient DOS in Data modem while handling TLB control messages from the Network...

Information disclosure

Transient DOS while parsing a vender specific IE Information Element of reassociation response management frame...

Information disclosure

Transient DOS while converting TWT Target Wake Time frame parameters in the OTA broadcast...

Code injection

Transient DOS while parsing WPA IES, when it is passed with length more than expected size...

Design/Logic Flaw

Transient DOS in Bluetooth Host while rfc slot allocation...

Design/Logic Flaw

Transient DOS in Data modem while handling TLB control messages from the Network...

Design/Logic Flaw

Transient DOS in Modem after RRC Setup message is received...

Design/Logic Flaw

Transient DOS in Modem when a Beam switch request is made with a non-configured BWP...

Authentication flaw

Transient DOS in Automotive OS due to improper authentication to the secure IO calls...

CVE-2023-33098

CVE-2023-33098 describes a transient Denial of Service in WLAN firmware when parsing WPA IES with length exceeding the expected size. The root cause is a buffer over-read in Qualcomm WLAN firmware (Qualcomm components; closed-source) leading to DoS with no user interaction and network-based explo...