Priority LOW 30
Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00073 · Published 2026-10-06 · No fix listed CWE-416
Priority LOW 39
Transient DOS when processing authentication frames with invalid FILS information element header lengths.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00345 · Published 2026-09-17 · No fix listed CWE-126
Priority LOW 30
Memory Corruption when processing registry values with incorrect types using a direct query method.
CVSS 3.1MEDIUM 6.7· Local · High privileges · No interaction · EPSS 0.00107 · Published 2026-08-04 · No fix listed CWE-120
Priority LOW 32
Transient DOS when processing target power rate tables during channel configuration.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00216 · Published 2026-05-04 · No fix listed CWE-126
Priority LOW 39
Transient DOS while processing an ANQP message.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.0033 · Published 2025-08-06 · No fix listed CWE-617
Priority LOW 38
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00244 · Published 2025-07-08 · No fix listed CWE-126
Priority LOW 38
Transient DOS may occur while parsing SSID in action frames.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00267 · Published 2025-04-07 · No fix listed CWE-126
Priority LOW 35
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00109 · Published 2025-04-07 · No fix listed CWE-787
Priority LOW 35
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00109 · Published 2025-04-07 · No fix listed CWE-787
Priority LOW 35
Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00131 · Published 2025-01-06 · No fix listed CWE-121
Priority LOW 35
Memory corruption when IOCTL call is invoked from user-space to read board data.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00109 · Published 2025-01-06 · No fix listed CWE-120
Priority LOW 35
Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00103 · Published 2024-12-02 · No fix listed CWE-119
Priority LOW 35
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.
CVSS 3.1HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00103 · Published 2024-12-02 · No fix listed CWE-121
Priority MEDIUM 44
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.00145 · Published 2024-11-04 · No fix listed CWE-310
Priority LOW 39
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00297 · Published 2024-09-02 · No fix listed CWE-126
Priority LOW 39
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00297 · Published 2024-09-02 · No fix listed CWE-126
Priority LOW 33
Transient DOS while parse fils IE with length equal to 1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00324 · Published 2024-02-06 · No fix listed CWE-126
Priority LOW 39
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00324 · Published 2024-02-06 · No fix listed CWE-126
Priority LOW 39
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00324 · Published 2024-02-06 · No fix listed CWE-476
Priority LOW 33
Transient DOS while parsing IPv6 extension header when WLAN firmware receives an IPv6 packet that contains `IPPROTO_NONE` as the next header.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00324 · Published 2024-01-02 · No fix listed CWE-835
Priority LOW 33
Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00338 · Published 2024-01-02 · No fix listed CWE-476
Priority LOW 39
Transient DOS in WLAN Firmware while parsing a BTM request.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00338 · Published 2024-01-02 · No fix listed CWE-126
Priority LOW 33
Transient DOS while parsing WPA IES, when it is passed with length more than expected size.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00471 · Published 2023-12-05 · No fix listed CWE-126
Priority LOW 33
Transient DOS when processing a NULL buffer while parsing WLAN vdev.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00471 · Published 2023-12-05 · No fix listed CWE-476
Priority LOW 36
Memory corruption when processing cmd parameters while parsing vdev.
CVSS 3.1HIGH 8.4· Local · No auth · No interaction · EPSS 0.00159 · Published 2023-12-05 · No fix listed CWE-476
Load more