CVE-2026-24077
Medium · 6.5CVSS
6.5
EPSS
0.2%
Published
Aug 4, 2026
CISA due date
—
The record
Information Disclosure when processing wireless network channel switch information with improperly formatted length fields.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-111735 P-Net before 1.0.3 contains an integer underflow in pf_cpm_c_data_ind(). CWE-191
- CVE-2026-103411 An Integer Underflow vulnerability in DhcpMessageDecoder in Juniper Networks Session… CWE-191
- CVE-2026-111808 Apache Traffic Server can be used to exhaust an HTTP/1.1 origin's worker pool via a… CWE-191
- CVE-2026-74755 An integer underflow in the mcpack2pb component of Apache bRPC (version < 1.18.0) on all… CWE-191
- CVE-2026-88143 Heap-based buffer overflow in Windows Storage Spaces Controller allows an authorized… CWE-191
- CVE-2026-85339 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows attacker… CWE-191
- CVE-2026-83838 Integer underflow (wrap or wraparound) in Windows Bluetooth A2DP driver allows an… CWE-191
- CVE-2026-83836 Heap-based buffer overflow in Windows Event Tracing allows an unauthorized attacker to… CWE-191