Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.
8.4CVSS
7.7AI Score
0.0004EPSS
Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.
8.4CVSS
7.9AI Score
0.0004EPSS
Memory corruption in WLAN HAL while processing WMI-UTF command or FTM TLV1 command.
8.4CVSS
7.9AI Score
0.0004EPSS
7.8CVSS
7.8AI Score
0.0004EPSS
Memory corruption in WLAN Host when the firmware invokes multiple WMI Service Available command.
7.8CVSS
7.8AI Score
0.0004EPSS
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data.
7.8CVSS
7.7AI Score
0.0004EPSS
7.8CVSS
7.6AI Score
0.0004EPSS
6.1CVSS
5.3AI Score
0.0004EPSS
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces.
7.8CVSS
7.9AI Score
0.0004EPSS
Memory corruption in WLAN HAL while handling command streams through WMI interfaces.
7.8CVSS
7.9AI Score
0.0004EPSS
Information disclosure in WLAN HOST while processing the WLAN scan descriptor list during roaming scan.
6.1CVSS
5.5AI Score
0.0004EPSS
8.8CVSS
8.8AI Score
0.001EPSS
Transient DOS in WLAN Host while doing channel switch announcement (CSA), when a mobile station receives invalid channel in CSA IE.
7.5CVSS
7.5AI Score
0.001EPSS
Transient DOS in WLAN Host when an invalid channel (like channel out of range) is received in STA during CSA IE.
7.5CVSS
7.5AI Score
0.001EPSS
Transient DOS while parsing a vender specific IE (Information Element) of reassociation response management frame.
7.5CVSS
7.5AI Score
0.0004EPSS
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains IPPROTO_NONE as the next header.
7.5CVSS
7.5AI Score
0.0004EPSS
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
7.5CVSS
7.6AI Score
0.0005EPSS
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
7.5CVSS
7.6AI Score
0.0005EPSS