CVE-2022-40516
Published Jan 9, 2023Memory corruption in Core due to stack-based buffer overflow.
- evidence mentions
- 2
- Buzz score
- 21.0
Loading current evidence
Historical archive search
Search decades of CVEs by regex, severity, date, CWE, vendor/product tags, KEV, PoC, and other evidence.
Results
51 results · Sorted by Highest Buzz score first
Memory corruption in Core due to stack-based buffer overflow.
Possible stack out of bound write might happen due to time bitmap length and bit duration fields of the attributes like NAN ranging setup attribute inside a NAN management frame a…
Information disclosure due to buffer over-read in WLAN while handling IBSS beacons frame.
Transient DOS due to buffer over-read in WLAN while parsing corrupted NAN frames.
Memory corruption due to buffer copy without checking size of input in modem while receiving WMI_REQUEST_STATS_CMDID command.
Information disclosure due to buffer over-read in WLAN while WLAN frame parsing due to missing frame length check.
Information disclosure due to buffer over-read in WLAN while parsing BTM action frame.
Memory corruption in core due to stack-based buffer overflow
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Transient DOS while creating NDP instance.
Memory corruption while deinitializing a HDCP session.
Memory corruption during the secure boot process, when the `bootm` command is used, it bypasses the authentication of the kernel/rootfs image.
Memory corruption in TZ Secure OS while requesting a memory allocation from TA region.
Transient DOS in WLAN firmware while parsing MLO (multi-link operation).
Transient DOS in WLAN Firmware while parsing FT Information Elements.
Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.
Memory corruption in Linux Networking due to double free while handling a hyp-assign.
Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.
Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.
Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.
Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.
Transient DOS due to improper input validation in WLAN Host.
Transient DOS due to improper input validation in WLAN Host while parsing frame during defragmentation.
Transient DOS due to buffer over-read in WLAN Host while parsing frame information.
Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.
Every filter state lives in the URL so you can bookmark, share, and crawl exact historical slices instead of a client-only search session.
Buzz order uses the latest all-time evidence snapshot, refreshed every two hours. Evidence-bearing CVEs rank first; records without a snapshot continue newest-first.