Transient DOS while parsing WLAN beacon or probe-response frame.

Transient DOS in WLAN Firmware while parsing FT Information Elements.

Windows Secure Channel Denial of Service Vulnerability

Transient DOS in WLAN Firmware while processing the received beacon or probe response frame.

Transient DOS while processing an improperly formatted Fine Time Measurement (FTM) management frame.

Transient DOS during music playback of ALAC content.

Transient DOS due to buffer over-read in WLAN while sending a packet to device.

Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.

A vulnerability in the OLE2 file format parser of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition on an affected device. This vulnerability is due to an incorrect check for end-of-string values during scanning, which may result in a heap buffer over-read. An attacker could exploit this vulnerability by submitting a crafted file containing OLE2 content to be scanned by ClamAV on an affected device. A successful exploit could allow the attacker to cause the ClamAV scanning process to terminate, resulting in a DoS condition on the affected software and consuming available system resources. For a description of this vulnerability, see the ClamAV blog .

Transient DOS due to buffer over-read in WLAN Firmware while parsing secure FTMR frame with size lesser than 39 Bytes.

Transient DOS due to buffer over-read in WLAN Host while parsing frame information.

Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability

Transient DOS due to buffer over-read in WLAN while processing an incoming management frame with incorrectly filled IEs.

Transient DOS while processing the tone measurement response buffer when the response buffer is out of range.

Transient DOS while handling beacon frames with invalid IE header length.

Transient DOS while processing a frame with malformed shared-key descriptor.

The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, _rt_md5_hmac_veneer() or _rt_hmac_sha1_veneer(), resulting in a stack buffer over-read which can be exploited for denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker does not need to know the network's PSK.

A remote, unauthenticated attacker can send a specific crafted HTTP or HTTPS requests causing a buffer over-read resulting in a crash of the webserver of the CODESYS Control runtime system.

Transient DOS while parsing GATT service data when the total amount of memory that is required by the multiple services is greater than the actual size of the services buffer.