CVE-2026-74341
HIGH
MEDIUM
Priority: 0.05
BB Relevance:
63/100
Published: 2026-08-15
Modified: 2026-10-30
First seen: 2026-10-30
Status: active
Attack Surface
Adjacent
Low Complexity
No Auth
No Interaction
Conf. Impact
Integ. Impact
CVSS Vector Breakdown
AV:
Adjacent
AC:
Low
PR:
None
UI:
None
S:
Unchanged
C:
High
I:
High
A:
High
Description
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix heap overflow from oversized firmware HAL response The firmware response dispatcher copies all synchronous HAL responses into the 4096-byte hal_buf without validating the response length. A response exceeding WCN36XX_HAL_BUF_SIZE causes a heap buffer overflow with firmware-controlled content. Add a bounds check on the response length.
Affected Software (9)
| Vendor | Product | Version |
|---|---|---|
| Linux | Linux | 8e84c25821698bdef73c0329fb2022a4673b7adc < 7acc1995bdcfdd82b2dd0dc735b1a4b076ae88a0 |
| Linux | Linux | 8e84c25821698bdef73c0329fb2022a4673b7adc < b80c4b5268c297b0503f65ef18038327e2119ad1 |
| Linux | Linux | 8e84c25821698bdef73c0329fb2022a4673b7adc < dae9cadf0925f1cbfb71306d60490890df3870a6 |
| Linux | Linux | 8e84c25821698bdef73c0329fb2022a4673b7adc < cfc67aee0c83e7f5d43a1dad3e25c789e9cc1d92 |
| Linux | Linux | 8e84c25821698bdef73c0329fb2022a4673b7adc < 15545ee71301e82d26d9a31b407ed0019eb62a60 |
| Linux | Linux | 8e84c25821698bdef73c0329fb2022a4673b7adc < 1b5d8a248c3afa640bcc99fa95abcd1e36f3ee18 |
| Linux | Linux | 8e84c25821698bdef73c0329fb2022a4673b7adc < 18813b90032bfaafb225906a4d2b51be4dfc02c3 |
| Linux | Linux | 8e84c25821698bdef73c0329fb2022a4673b7adc < 88a240d86d3d64521f9194abe185ac71cc74d0bd |
| Linux | Linux | 3.13 |