TI-2022-07257 CVE-2022-23088 · GHSA-7xg3-5hhv-932f
802.11 heap buffer overflow
Priority MEDIUM 55
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer.
3 records
The 802.11 beacon handling routine failed to validate the length of an IEEE 802.11s Mesh ID before copying it to a heap-allocated buffer.
The e1000 network adapters permit a variety of modifications to an Ethernet packet when it is being transmitted.
Handlers for *_CFG_PAGE read / write ioctls in the mpr, mps, and mpt drivers allocated a buffer of a caller-specified size, but copied to it a fixed size header.