Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
The product reads data past the end, or before the beginning, of the intended buffer.
Link | Tags |
---|---|
https://www.qualcomm.com/company/product-security/bulletins/february-2024-bulletin | vendor advisory |