Threats tagged 'ghsa-3qxj-gg5h-r87p'

A vulnerability in the Linux kernel's iwlwifi driver was resolved that involved improper validation of length values in the firmware parser. The issue was a failure to validate that the length of a Type-Length-Value (TLV) element was aligned and within the remaining parser length before consuming bytes, which could cause a length underflow with malformed TLVs.