PT-2025-35873 · Unknown · Wl Cfgscan.C

Published 2025-09-04 · Updated 2025-09-09 · CVE-2024-56190

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions wl cfgscan.c (affected versions not specified)

Description The wl update hidden ap ie() function within wl cfgscan.c contains a potential out-of-bounds write issue stemming from inadequate input validation. Successful exploitation of this issue may allow for local privilege escalation without requiring additional execution privileges or user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

RCE

Weakness Enumeration

CWE-787

CWE-20

Related Identifiers

CVE-2024-56190

Affected Products

Wl Cfgscan.C

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-56190 · Security Note
• https://source.android.com/security/bulletin/pixel/2025-04-01 · Vendor Advisory
• https://twitter.com/cracbot/status/1965369629586718832 · Twitter Post
• https://t.me/CVEtracker/31667 · Telegram Post
• https://twitter.com/CVEnew/status/1963475327398621491 · Twitter Post
• https://t.me/cveNotify/134470 · Telegram Post