CyberRota Analysis
AI-GeneratedThe vulnerability affects the Linux kernel's wcn36xx driver, where an out-of-bounds read can occur due to insufficient validation of the firmware-controlled rsp->count field when indexing the rsp->regs[] array. This flaw could lead to unauthorized access to memory, potentially exposing sensitive data or causing application crashes. Organizations using affected Linux distributions should prioritize patching this vulnerability to mitigate risks associated with memory corruption and data leakage.
Original NVD Description
In the Linux kernel, the following vulnerability has been resolved: wifi: wcn36xx: fix OOB read from firmware count in PRINT_REG_INFO indication The firmware-controlled rsp->count field is used as the loop bound for indexing into the flexible rsp->regs[] array without validation against the message length. A count exceeding the actual data causes out-of- bounds reads from the heap-allocated message buffer. Add a check that count fits within the received message.