EUVD-2025-20487Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Lifecycle Timeline
3DescriptionCVE.org
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Analysis
Transient DOS may occur when processing vendor-specific information elements while parsing a WLAN frame for BTM requests.
Technical ContextAI
A denial of service vulnerability allows an attacker to disrupt the normal functioning of a system, making it unavailable to legitimate users. This vulnerability is classified as Buffer Over-read (CWE-126).
RemediationAI
Implement rate limiting and input validation. Use timeout mechanisms for resource-intensive operations. Deploy DDoS protection where applicable.
More in Qcn9000 Firmware
View allMemory corruption while processing command in Glink linux. Rated high severity (CVSS 7.8), this vulnerability is low att
Memory corruption whhile handling the subsystem failure memory during the parsing of video packets received from the vid
Memory corruption while processing video packets received from video firmware.
Memory corruption while deinitializing a HDCP session. [CVSS 7.8 HIGH]
Transient DOS may occur while parsing SSID in action frames. Rated high severity (CVSS 7.5), this vulnerability is remot
Transient DOS may occur while parsing extended IE in beacon. Rated high severity (CVSS 7.5), this vulnerability is remot
Network-accessible denial-of-service vulnerability in tone measurement response buffer processing that occurs when buffe
Transient denial-of-service vulnerability in wireless beacon frame processing that occurs when a device receives a malfo
Transient DOS while parsing the EPTM test control message to get the test pattern. Rated high severity (CVSS 7.5), this
Transient DOS while handling beacon frames with invalid IE header length.
Cryptographic issue may arise because the access control configuration permits Linux to read key registers in TCSR. Rate
Information disclosure while processing a firmware event. [CVSS 6.1 MEDIUM]
Same weakness CWE-126 – Buffer Over-read
View allSame technique Buffer Overflow
View allShare
External POC / Exploit Code
Leaving vuln.today