Transient DOS while parsing probe response and assoc response frame when received frame length is less than max size of timestamp.
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://docs.qualcomm.com/product/publicresources/securitybulletin/august-2024-bulletin.html | patch vendor advisory |