Transient DOS while parsing MBSSID during new IE generation in beacon/probe frame when IE length check is either missing or improper.
The product reads from a buffer using buffer access mechanisms such as indexes or pointers that reference memory locations after the targeted buffer.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ar8035_firmware | Qualcomm | - (including) | - (including) |