Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

83 records

Priority LOW 30

Memory Corruption when processing concurrent DMA buffer allocation and deallocation commands without proper synchronization.

CVSS 3.1MEDIUM 6.7 Local High privileges No interaction EPSS 0.00073 Published 2026-10-06 No fix listed CWE-416
TI-2026-20407 CVE-2026-25275 · GHSA-r23j-xxqv-w996

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS when processing authentication frames with invalid FILS information element header lengths.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00345 Published 2026-09-17 No fix listed CWE-126
TI-2025-29913 CVE-2025-47401 · GHSA-j2m8-jxhw-9x9r

Buffer Over-read in WLAN HAL

Priority LOW 32

Transient DOS when processing target power rate tables during channel configuration.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00216 Published 2026-05-04 No fix listed CWE-126
TI-2025-19936 CVE-2025-27066 · GHSA-hgjc-f253-c7xh

Reachable Assertion in WLAN Firmware

Priority LOW 39

Transient DOS while processing an ANQP message.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0033 Published 2025-08-06 No fix listed CWE-617
TI-2025-15410 CVE-2025-21446 · GHSA-vr8p-mwh4-q7pp

Buffer Over-read in WLAN Firmware

Priority LOW 38

Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00244 Published 2025-07-08 No fix listed CWE-126
TI-2025-15412 CVE-2025-21448 · GHSA-f4p6-w7ph-5gqm

Buffer Over-read in WLAN Firmware

Priority LOW 38

Transient DOS may occur while parsing SSID in action frames.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00267 Published 2025-04-07 No fix listed CWE-126
TI-2025-15405 CVE-2025-21441 · GHSA-pwvp-7q9f-hp59

Out-of-bounds Read in Windows WLAN Host

Priority LOW 35

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00109 Published 2025-04-07 No fix listed CWE-787
TI-2025-15404 CVE-2025-21440 · GHSA-4m65-9g68-65w5

Out-of-bounds Read in Windows WLAN Host

Priority LOW 35

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00109 Published 2025-04-07 No fix listed CWE-787
Priority LOW 35

Memory corruption when IOCTL call is invoked from user-space to write board data to WLAN driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00131 Published 2025-01-06 No fix listed CWE-121
Priority LOW 35

Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00103 Published 2024-12-02 No fix listed CWE-121
TI-2024-25658 CVE-2024-38408 · GHSA-wqm7-xh9j-c3ff

Cryptographic Issues in BT Controller

Priority MEDIUM 44

Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00145 Published 2024-11-04 No fix listed CWE-310
TI-2024-21914 CVE-2024-33051 · GHSA-r5wp-3hxw-g22v

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS while processing TIM IE from beacon frame as there is no check for IE length.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00297 Published 2024-09-02 No fix listed CWE-126
TI-2024-15463 CVE-2024-23364 · GHSA-x8m4-fr4x-c3j5

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information Element (IE) of a beacon frame that is received from over-the-air (OTA).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00297 Published 2024-09-02 No fix listed CWE-126
TI-2023-23293 CVE-2023-43536 · GHSA-cffx-cf3x-mr9h

Buffer Over-read in WLAN Firmware

Priority LOW 33

Transient DOS while parse fils IE with length equal to 1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00324 Published 2024-02-06 No fix listed CWE-126
TI-2023-23290 CVE-2023-43533 · GHSA-3xhr-vwcx-8p3c

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00324 Published 2024-02-06 No fix listed CWE-126
TI-2023-23279 CVE-2023-43522 · GHSA-xvvv-2v53-5hxv

NULL Pointer Dereference in WLAN Firmware

Priority LOW 39

Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00324 Published 2024-02-06 No fix listed CWE-476
TI-2023-16289 CVE-2023-33109 · GHSA-9gv7-j9wm-9q6p

NULL Pointer Dereference in WLAN Firmware

Priority LOW 33

Transient DOS while processing a WMI P2P listen start command (0xD00A) sent from host.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2024-01-02 No fix listed CWE-476
TI-2023-16247 CVE-2023-33062 · GHSA-cxcm-vgv2-mq4g

Buffer Over-read in WLAN Firmware

Priority LOW 39

Transient DOS in WLAN Firmware while parsing a BTM request.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00338 Published 2024-01-02 No fix listed CWE-126
TI-2023-16279 CVE-2023-33098 · GHSA-6pgv-mjmc-g3jw

Buffer Over-read in WLAN Firmware

Priority LOW 33

Transient DOS while parsing WPA IES, when it is passed with length more than expected size.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00471 Published 2023-12-05 No fix listed CWE-126
TI-2023-16272 CVE-2023-33089 · GHSA-28qw-8jmg-32wx

NULL Pointer Dereference in WLAN Firmware

Priority LOW 33

Transient DOS when processing a NULL buffer while parsing WLAN vdev.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00471 Published 2023-12-05 No fix listed CWE-476
TI-2023-16271 CVE-2023-33088 · GHSA-vxgq-8374-wq2x

NULL pointer dereference in WLAN Firmware

Priority LOW 36

Memory corruption when processing cmd parameters while parsing vdev.

CVSS 3.1HIGH 8.4 Local No auth No interaction EPSS 0.00159 Published 2023-12-05 No fix listed CWE-476
Load more