| CVE-2024-43053 |
Memory corruption while invoking IOCTL calls from user space to read WLAN target diagnostic information
|
7.8
High
|
Dec 2, 2024 |
| CVE-2024-43050 |
Memory corruption while invoking IOCTL calls from user space to issue factory test command inside WLAN driver
|
7.8
High
|
Dec 2, 2024 |
| CVE-2024-43049 |
Memory corruption while invoking IOCTL calls from user space to set generic private command inside WLAN driver
|
7.8
High
|
Dec 2, 2024 |
| CVE-2024-38410 |
Memory corruption while IOCLT is called when device is in invalid state and the WMI command buffer may be freed twice
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38409 |
Memory corruption while station LL statistic handling
|
7.8
High
|
Nov 4, 2024 |
| CVE-2024-38408 |
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions
|
8.2
High
|
Nov 4, 2024 |
| CVE-2024-38405 |
Transient DOS while processing the CU information from RNR IE
|
7.5
High
|
Nov 4, 2024 |
| CVE-2024-38403 |
Transient DOS while parsing BTM ML IE when per STA profile is not included
|
7.5
High
|
Nov 4, 2024 |
| CVE-2024-33073 |
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
8.2
High
|
Oct 7, 2024 |
| CVE-2024-33069 |
Transient DOS when transmission of management frame sent by host is not successful and error status is received in the…
|
7.5
High
|
Oct 7, 2024 |
| CVE-2024-33057 |
Transient DOS while parsing the multi-link element Control field when common information length check is missing…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33051 |
Transient DOS while processing TIM IE from beacon frame as there is no check for IE length
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33048 |
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-23364 |
Transient DOS when processing the non-transmitted BSSID profile sub-elements present within the MBSSID Information…
|
7.5
High
|
Sep 2, 2024 |
| CVE-2024-33026 |
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size…
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33025 |
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33024 |
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the…
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33020 |
Transient DOS while processing TID-to-link mapping IE elements
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33019 |
Transient DOS while parsing the received TID-to-link mapping action frame
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33018 |
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33015 |
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is…
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33014 |
Transient DOS while parsing ESP IE from beacon/probe response frame
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33013 |
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length
|
7.5
High
|
Aug 5, 2024 |
| CVE-2024-33012 |
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with…
|
7.5
High
|
Aug 5, 2024 |