| CVE-2024-33056 |
Memory corruption when allocating and accessing an entry in an SMEM partition continuously
|
8.4
Élevée
|
2 déc. 2024 |
| CVE-2024-33073 |
Information disclosure while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
8.2
Élevée
|
7 oct. 2024 |
| CVE-2024-33066 |
Memory corruption while redirecting log file to any file location with any file name
|
9.8
Critique
|
7 oct. 2024 |
| CVE-2024-33057 |
Transient DOS while parsing the multi-link element Control field when common information length check is missing…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33050 |
Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing…
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33048 |
Transient DOS while parsing the received TID-to-link mapping element of beacon/probe response frame
|
7.5
Élevée
|
2 sept. 2024 |
| CVE-2024-33016 |
memory corruption when an invalid firehose patch command is invoked
|
6.8
Moyenne
|
2 sept. 2024 |
| CVE-2024-33026 |
Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33025 |
Transient DOS while parsing the BSS parameter change count or MLD capabilities fields of the ML IE
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33024 |
Transient DOS while parsing the ML IE when a beacon with length field inside the common info of ML IE greater than the…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33019 |
Transient DOS while parsing the received TID-to-link mapping action frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33018 |
Transient DOS while parsing the received TID-to-link mapping element of the TID-to-link mapping action frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33015 |
Transient DOS while parsing SCAN RNR IE when bytes received from AP is such that the size of the last param of IE is…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33014 |
Transient DOS while parsing ESP IE from beacon/probe response frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33013 |
Transient DOS when driver accesses the ML IE memory and offset value is incremented beyond ML IE length
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33012 |
Transient DOS while parsing the multiple MBSSID IEs from the beacon, when the tag length is non-zero value but with…
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33011 |
Transient DOS while parsing the MBSSID IE from the beacons, when the MBSSID IE length is zero
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-33010 |
Transient DOS while parsing fragments of MBSSID IE from beacon frame
|
7.5
Élevée
|
5 août 2024 |
| CVE-2024-21467 |
Information disclosure while handling beacon probe frame during scan entry generation in client side
|
6.5
Moyenne
|
5 août 2024 |
| CVE-2024-21459 |
Information disclosure while handling beacon or probe response frame in STA
|
6.5
Moyenne
|
5 août 2024 |
| CVE-2024-23368 |
Memory corruption when allocating and accessing an entry in an SMEM partition
|
7.8
Élevée
|
1 juil. 2024 |
| CVE-2024-21482 |
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of…
|
6.8
Moyenne
|
1 juil. 2024 |
| CVE-2024-21458 |
Information disclosure while handling SA query action frame
|
6.5
Moyenne
|
1 juil. 2024 |
| CVE-2024-21457 |
INformation disclosure while handling Multi-link IE in beacon frame
|
6.5
Moyenne
|
1 juil. 2024 |
| CVE-2024-23363 |
Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame
|
7.5
Élevée
|
3 juin 2024 |