Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-29468

The Texas Instruments (TI) WiLink WL18xx MCP driver does not limit the number of information elements (IEs) of type XCC_EXT_1_IE_ID or XCC_EXT_2_IE_ID that can be parsed in a management frame. Using a specially crafted frame, a buffer overflow can be triggered that can potentially lead to remote code execution. This affects WILINK8-WIFI-MCP8 version 8.5_SP3 and earlier.

Published

2023-08-14T19:15:11.437

Last Modified

2025-05-05T16:15:34.947

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 9.8 (CRITICAL)

Weaknesses
  • Type: Primary
    CWE-120
  • Type: Secondary
    CWE-120
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application ti wilink8-wifi-mcp8 < 8.5 Yes
Application ti wilink8-wifi-mcp8 8.5 Yes
Application ti wilink8-wifi-mcp8 8.5 Yes
References