Threats tagged 'ghsa-x52f-2whg-fhgm'

A vulnerability in the Linux kernel's rtl8723bs staging driver was resolved. The rtw_get_ie() parser did not properly validate the length byte of Information Elements (IE), leading to out-of-bounds reads or potential infinite loops when processing malformed frames. The fix ensures the parser validates IE length against the remaining buffer before processing. This prevents memory safety issues caused by malformed frames.