MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips that stems from improper validation of wlan driver inputs, which may result in out-of-bounds writes...

PT-2024-18504 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible memory leak in the wlan driver due to improper input handling. This could lead to a remote denial of service, and no additional execution privileges a...

[SECURITY] Fedora 39 Update: wpa_supplicant-2.10-9.fc39

wpasupplicant is a WPA Supplicant for Linux, BSD and Windows with support for WPA and WPA2 IEEE 802.11i / RSN. Supplicant is the IEEE 802.1X/WPA component that is used in the client stations. It implements key negotiation with a WPA Authenticator and it controls the roaming and IEEE 802.11...

CVE-2023-43533

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...

Design/Logic Flaw

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...

CVE-2023-43536 Buffer Over-read in WLAN Firmware

Transient DOS while parse fils IE with length equal to 1...

CVE-2023-43536 Buffer Over-read in WLAN Firmware

Transient DOS while parse fils IE with length equal to 1...

CVE-2023-43534 Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point...

CVE-2023-43534 Use of Out-of-range Pointer Offset in WLAN HOST

Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point...

CVE-2023-43533 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...

CVE-2023-43533 Buffer Over-read in WLAN Firmware

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame...

CVE-2023-43533

CVE-2023-43533 concerns a transient DoS in WLAN firmware on Qualcomm chipsets when a received beacon’s length is shorter than the 802.11 beacon frame. Multiple sources document the issue with the same description, indicating the WLAN firmware is the affected component and the root cause relates t...

CVE-2023-43523 Reachable Assertion in WLAN Firmware

Transient DOS while processing 11AZ RTT management action frame received through OTA...

CVE-2023-43523 Reachable Assertion in WLAN Firmware

Transient DOS while processing 11AZ RTT management action frame received through OTA...

CVE-2023-43522 NULL Pointer Dereference in WLAN Firmware

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL...

CVE-2023-43522 NULL Pointer Dereference in WLAN Firmware

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL...

CVE-2023-43520 Stack-based Buffer Overflow in WLAN HOST

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...

CVE-2023-43520 Stack-based Buffer Overflow in WLAN HOST

Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE...

CVE-2024-22366

Active debug code exists in Yamaha wireless LAN access point devices. If a logged-in user who knows how to use the debug function accesses the device's management page, this function can be enabled by performing specific operations. As a result, an arbitrary OS command may be executed and/or...

Qualcomm WLAN October 2023 Security Update

Potential vulnerabilities were identified in the Qualcomm WLAN Driver for certain HP PC products, which might allow arbitrary code execution or information disclosure. Qualcomm has released updates to mitigate the potential vulnerabilities. HP has identified affected platforms and corresponding...