CVE-2025-20740

In wlan STA driver, there is a possible out of bounds read due to a race condition. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435337; Issue ID: MSV-4036...

CVE-2025-20737

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435343; Issue ID: MSV-4040...

CVE-2025-20735

In wlan AP driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00435349; Issue ID: MSV-4051...

CVE-2025-20733

CVE-2025-20733 affects the WLAN AP driver (Aruba MediaTek-based). The issue is an out-of-bounds write caused by an incorrect bounds check, enabling local privilege escalation with user privileges required and no user interaction. Patch WCNCR00441509 (MSV-4138) mitigates this; vendor advisories an...

CVE-2025-20728

In wlan STA driver, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation. Patch ID: WCNCR00447115; Issue ID: MSV-4276...

PT-2025-44978

Name of the Vulnerable Software and Affected Versions Aruba wlan AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...

PT-2025-44977

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...

PT-2025-44976

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. Successful exploitation of this issue could allow a local user to gain...

PT-2025-44974

Name of the Vulnerable Software and Affected Versions Cisco WLAN AP Driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This condition could allow for local escalation of privilege, requiring Use...

PT-2025-44972

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could lead to local escalation of privilege, requiring User...

PT-2025-44967

Name of the Vulnerable Software and Affected Versions Qualcomm wlan STA driver affected versions not specified Description An out-of-bounds write issue exists in the wlan STA driver due to an incorrect bounds check. Successful exploitation could lead to local escalation of privilege, requiring Us...

PT-2025-44981

Name of the Vulnerable Software and Affected Versions ZyXEL WLAN AP Driver affected versions not specified Description The WLAN AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. This condition could allow for remote proximal/adjacent escalation of...

PT-2025-44971

Name of the Vulnerable Software and Affected Versions Linksys Wireless Network Controller Driver affected versions not specified Description The wlan AP driver contains a potential out-of-bounds write issue stemming from an incorrect bounds check. Successful exploitation could allow a malicious...

Oracle Linux 8 : kernel (ELSA-2025-19447)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-19447 advisory. - smb3: missing lock when picking channel Paulo Alcantara RHEL-109546 CVE-2024-35999 - smb: client: fix potential deadlock when reconnecting channels...

PT-2025-44970

Name of the Vulnerable Software and Affected Versions Cisco Wireless Lan AP Driver affected versions not specified Description The wlan AP driver contains a flaw where an incorrect bounds check can lead to an out-of-bounds write. Successful exploitation of this issue could allow a malicious actor...

PT-2025-44987

Name of the Vulnerable Software and Affected Versions Aruba WLAN AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges to escala...

PT-2025-44968

Name of the Vulnerable Software and Affected Versions Cisco Wireless Lan AP Driver affected versions not specified Description An out-of-bounds write issue exists in the wlan AP driver due to an incorrect bounds check. Successful exploitation could allow a malicious actor with System privileges t...

CVE-2025-12357

By manipulating the Signal Level Attenuation Characterization SLAC protocol with spoofed measurements, an attacker can stage a man-in-the-middle attack between an electric vehicle and chargers that comply with the ISO 15118-2 part. This vulnerability may be exploitable wirelessly, within close...

kernel: wifi: cfg80211: fix use-after-free in cmp_bss()

A use after free vulnerbility exists in the linux kernel wifi module in the cmpbss function,an attacker could create a crafted payload to trigger, leading to damage availability and integrity of the system...

PT-2026-36839

Name of the Vulnerable Software and Affected Versions The product name cannot be determined affected versions not specified Description A transient Denial of Service DOS occurs when processing a malformed Fast Transition response frame that contains an invalid header structure during wireless...