Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Windows Wi-Fi Driver RCE Vulnerability – CVE-2024-30078

crowdfense.com | vulnerability | CVE-2024-30078 | #rce | #windows | #vulnerability-analysis | #cve-2024-30078 | #wifi-driver | #nwifi | #bindiff

Summary

Root-cause analysis of CVE-2024-30078 in Windows' nwifi.sys Wi-Fi driver: a missing length check in Dot11Translate80211ToEthernetNdisPacket enables potential over-the-air RCE with heavy constraints.
Published
Collected

original ↗

Related coverage

  1. CVE-2024-11477- 7-Zip ZSTD Buffer Overflow Vulnerability (crowdfense.com)
  2. A deep dive into CVE-2023-2163: How We found and Fixed an eBPF Linux Kernel Vulnerability (bughunters.google.com)
  3. Python Software Foundation - Python 3.11.0a3 to 3.15.0b2 (bishopfox.com)
  4. Buried in the Log. Exploiting a 20 years old NTFS Vulnerability (swarm.ptsecurity.com)
  5. James Kettle’s ‘autonomous research cascade’, CRLF-powered desync attacks, RCE on humanoid robots – ethical hacker news roundup (yeswehack.com)
  6. Critical remote code execution in vm2, a widely used Node.js sandbox library (about.gitlab.com)

back