CVE-2022-33279

Memory corruption due to stack based buffer overflow in WLAN having invalid WNM frame length...

CVE-2022-33253

Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames...

CVE-2022-33271

Information disclosure due to buffer over-read in WLAN while parsing NMF frame...

CVE-2022-33284

Information disclosure due to buffer over-read in WLAN while parsing BTM action frame...

CVE-2022-33235

Information disclosure due to buffer over-read in WLAN firmware while parsing security context info attributes. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2022-33239

Transient DOS due to loop with unreachable exit condition in WLAN firmware while parsing IPV6 extension header. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile,...

CVE-2022-33275

Memory corruption due to improper validation of array index in WLAN HAL when received lmitemNum is out of range...

CVE-2025-47395

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element...

CVE-2025-47395

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element...

Unity Linux 20.1070e Security Update: kernel (UTSA-2026-000233)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-000233 advisory. The Broadcom brcmfmac WiFi driver prior to commit 1b5e2423164b3670e8bc9174e4762d297990deff is vulnerable to a heap buffer overflow. If the Wake-up on Wireless LAN...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that could result in a transient denial of service when parsing WLAN management frames that contain vendor-specific information elements...

CVE-2025-47395 Buffer Over-read in WLAN Firmware

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element...

CVE-2025-47395 Buffer Over-read in WLAN Firmware

Transient DOS while parsing a WLAN management frame with a Vendor Specific Information Element...

PT-2026-1507

Episode 157 started with @hyprdude walking us through CVE-2025-20713 and CVE-2025-70631. We don’t really hear about kernel exploits every day on the pod, so go check it out! https://t.co/uIeQhWbMGL...

CVE-2025-15258

CVE-2025-15258 affects Edimax BR-6208AC (versions 1.02–1.03). The Web-based Configuration Interface’s formALGSetup handler at /goform/formALGSetup can be manipulated via the wlan-url argument to trigger an open redirect, with remote access and publicly available exploit evidence. Multiple sources...

CVE-2025-15258

A weakness has been identified in Edimax BR-6208AC 1.02/1.03. Affected by this issue is the function formALGSetup of the file /goform/formALGSetup of the component Web-based Configuration Interface. This manipulation of the argument wlan-url causes open redirect. The attack is possible to be...

PT-2025-54206

Name of the Vulnerable Software and Affected Versions Edimax BR-6208AC versions 1.02 through 1.03 Description A flaw exists in the Web-based Configuration Interface component of Edimax BR-6208AC versions 1.02 and 1.03. This issue is related to the formALGSetup function within the...

CVE-2023-53767 wifi: ath12k: fix memory leak in ath12k_qmi_driver_event_work()

In the Linux kernel, the following vulnerability has been resolved: wifi: ath12k: fix memory leak in ath12kqmidrivereventwork Currently the buffer pointed by event is not freed in case ATH12KFLAGUNREGISTERING bit is set, this causes memory leak. Add a goto skip instead of return, to ensure event...

CVE-2025-14015

A weakness has been identified in H3C Magic B0 up to 100R002. This impacts the function EditWlanMacList of the file /goform/aspForm. This manipulation of the argument param causes buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and...

PT-2025-49113

Name of the Vulnerable Software and Affected Versions H3C Magic B0 versions up to 100R002 Description A weakness exists in H3C Magic B0 up to version 100R002. The issue involves the EditWlanMacList function within the /goform/aspForm file. Manipulation of the param argument can lead to a buffer...