01 Record

CVE-2023-52525

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

UnratedPUBLISHEDCNA: Linux

CNA base scoreUnratedNo CNA CVSS vector

View raw JSON

02 Description

wifi: mwifiex: Fix oob check condition in mwifiex_process_rx_packet

03 Exploitation and scoring

Exploitation

Assessed, none found. CISA's assessment recorded neither public exploit code nor evidence of exploitation when it was made.

SSVC decision

ExploitationnoneCISA recorded no public exploit code and no evidence of exploitation.
AutomatablenoAt least one step from reconnaissance to exploitation cannot be reliably automated.
Technical ImpactpartialSuccessful exploitation gives limited control of the vulnerable component.

CISA publishes the decision points, not a final SSVC decision. The decision also depends on mission and well-being impact, which is a property of your deployment rather than of the vulnerability.

EPSS probability

0.24% probability of exploitation activity in the next 30 days.

EPSS percentile

Ranks above 15.0% of scored records. A rank, not a probability.

NVD base score

7.1 (CVSS v3.x), scored by the NVD independently of the CNA.

NVD CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

NVD analysis status

Analyzed. NVD last modified this record on 2026-06-17.

Red Hat severity

Moderate. Red Hat's rating for its own products, not a CVSS rating.

Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.

04 Metadata

Published

2024-03-02 21:52Z2 YR AGO

Last updated

2026-05-23 15:25Z3 MO AGO

Reserved

2024-02-20

Assigning CNA

Linux

Record state

PUBLISHED

Severity

Not rated by the issuing CNA

CNA CVSS vector

Not published by the issuing CNA

Weaknesses

CWE-125Out-of-bounds ReadBase

Data version

5.2

Document digest

1d48e6d49fecef1de5ac7155cafdc821ce5cd5312c895a79478b54d782eb9baa

05 Affected products

VendorProductVersionsPlatforms

LinuxLinuxf517c97fc129995de77dd06aa5a74f909ebf568f to < 71b1d2b57f145c8469aa9346f0fd57bf59b2b89c, 8824aa4ab62c800f75d96f48e1883a5f56ec5869 to < 16cc18b9080892d1a0200a38e36ae52e464bc555, 29eca8b7863d1d7de6c5b746b374e3487d14f154 to < b8e260654a29de872e7cb85387d8ab8974694e8e, 3fe3923d092e22d87d1ed03e2729db444b8c1331 to < 10a18c8bac7f60d32b7af22da03b66f350beee38, 7c54b6fc39eb1aac51cf2945f8a25e2a47fdca02 to < 5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6, 3975e21d4d01efaf0296ded40d11c06589c49245 to < 6b706286473db4fd54b5f869faa67f4a8cb18e99, 650d1bc02fba7b42f476d8b6643324abac5921ed to < be2ff39b1504c5359f4a083c1cfcad21d666e216, 11958528161731c58e105b501ed60b83a91ea941 to < aef7a0300047e7b4707ea0411dc9597cba108fc8, a7300e3800e9fd5405e88ce67709c1a97783b9c8, 6.4.16 to < 6.5, 4.14.326 to < 4.14.327, 4.19.295 to < 4.19.296, 5.4.257 to < 5.4.258, 5.10.195 to < 5.10.198, 5.15.132 to < 5.15.135, 6.1.53 to < 6.1.57, 6.5.3 to < 6.5.7—

06 References

git.kernel.orghttps://git.kernel.org/stable/c/71b1d2b57f145c8469aa9346f0fd57bf59b2b89c
git.kernel.orghttps://git.kernel.org/stable/c/16cc18b9080892d1a0200a38e36ae52e464bc555
git.kernel.orghttps://git.kernel.org/stable/c/b8e260654a29de872e7cb85387d8ab8974694e8e
git.kernel.orghttps://git.kernel.org/stable/c/10a18c8bac7f60d32b7af22da03b66f350beee38
git.kernel.orghttps://git.kernel.org/stable/c/5afb996349cb6d1f14d6ba9aaa7aed3bd82534f6
git.kernel.orghttps://git.kernel.org/stable/c/6b706286473db4fd54b5f869faa67f4a8cb18e99
git.kernel.orghttps://git.kernel.org/stable/c/be2ff39b1504c5359f4a083c1cfcad21d666e216
git.kernel.orghttps://git.kernel.org/stable/c/aef7a0300047e7b4707ea0411dc9597cba108fc8

01 Record index

CVE-2023-52525

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References

02 Records

CVE-2023-52525

02 Description

03 Exploitation and scoring

04 Metadata

05 Affected products

06 References