Buffer Over-read in WLAN Host Cmn
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
Export limit exceeded: 425850 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length.
Memory corruption when the payload received from firmware is not as per the expected protocol size.
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
Memory corruption while processing a private escape command in an event trigger.
Memory corruption while processing multiple simultaneous escape calls.
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.
Memory corruption in UTILS when modem processes memory specific Diag commands having arbitrary address values as input arguments.
Memory corruption while parsing qcp clip with invalid chunk data size.
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
While processing the authentication message in UE, improper authentication may lead to information disclosure.
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Transient DOS in WLAN Firmware while parsing a NAN management frame.
Information disclosure when the ADSP payload size received in HLOS in response to Audio Stream Manager matrix session is less than this expected size.
Memory corruption when two threads try to map and unmap a single node simultaneously.
Transient DOS while parse fils IE with length equal to 1.
Memory corruption when user provides data for FM HCI command control operations.
Memory corruption during management frame processing due to mismatch in T2LM info element.
Transient DOS when importing a PKCS#8-encoded RSA private key with a zero-sized modulus.