CVE ID | Publié | Description | Score | Gravité |
---|---|---|---|---|
Memory corruption during management frame processing due to mismatch in T2LM info element. | 9.8 |
Critique |
||
Memory corruption may occour occur when stopping the WLAN interface after processing a WMI command from the interface. | 7.8 |
Haute |
||
Memory corruption while parsing the ML IE due to invalid frame content. | 9.8 |
Critique |
||
Transient DOS can occur when the driver parses the per STA profile IE and tries to access the EXTN element ID without checking the IE length. | 7.5 |
Haute |
||
Transient DOS while parsing the multi-link element Control field when common information length check is missing before updating the location. | 7.5 |
Haute |
||
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper. | 7.5 |
Haute |
||
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame. | 7.5 |
Haute |
||
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame. | 7.5 |
Haute |
||
Information disclosure while handling T2LM Action Frame in WLAN Host. | 7.5 |
Haute |
||
Transient DOS while parsing a protected 802.11az Fine Time Measurement (FTM) frame. | 7.5 |
Haute |
||
Memory corruption while redirecting log file to any file location with any file name. | 9.8 |
Critique |
||
Memory corruption while parsing beacon/probe response frame when AP sends more supported links in MLIE. | 9.8 |
Critique |
||
Memory corruption while processing MBSSID beacon containing several subelement IE. | 9.8 |
Critique |
||
Memory corruption while processing TPC target power table in FTM TPC. | 8.4 |
Haute |
||
Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame. | 7.5 |
Haute |
||
Transient DOS in WLAN Host and Firmware when large number of open authentication frames are sent with an invalid transaction sequence number. | 7.5 |
Haute |
||
Memory corruption in Core Services while executing the command for removing a single event listener. | 9.3 |
Critique |
||
Transient DOS in WLAN firmware while parsing MLO (multi-link operation). | 7.5 |
Haute |
||
Transient DOS in WLAN Firmware while interpreting MBSSID IE of a received beacon frame. | 7.5 |
Haute |
||
Memory corruption in WLAN HAL while parsing WMI command parameters. | 7.8 |
Haute |
||
Memory corruption in WLAN HAL while handling command through WMI interfaces. | 7.8 |
Haute |
||
Memory corruption in WLAN HAL while handling command streams through WMI interfaces. | 7.8 |
Haute |
||
Memory corruption in WLAN HAL while passing command parameters through WMI interfaces. | 7.8 |
Haute |
||
Memory Corruption in Data Modem while processing DMA buffer release event about CFR data. | 7.8 |
Haute |
||
Memory Corruption in WLAN HOST while parsing QMI WLAN Firmware response message. | 7.8 |
Haute |
||
Memory Corruption in WLAN HOST while parsing QMI response message from firmware. | 7.8 |
Haute |
||
Arbitrary memory overwrite when VM gets compromised in TX write leading to Memory Corruption. | 7.8 |
Haute |
||
Memory Corruption in WLAN HOST while processing WLAN FW request to allocate memory. | 7.8 |
Haute |