[PATCH v2 0/3] wifi: wcn36xx: fix OOB reads and heap overflow from firmware responses

Tristan Madani tristmd at gmail.com
Wed Apr 15 15:23:55 PDT 2026


From: Tristan Madani <tristan at talencesecurity.com>

Hi Loic,

Note: this is a v2 resubmission. The original was sent via Gmail which
caused HTML rendering issues. This version uses git send-email for
proper plain-text formatting.

Three issues in wcn36xx HAL firmware response handling, including a heap
overflow in the main response dispatcher:

Proposed fixes in the following patches.

Thanks,
Tristan




More information about the wcn36xx mailing list