← Database

CVE-2026-80933

HIGH CVSS: 7.8 Published: 2026-09-11 Modified: 2026-09-14

Description

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7996: validate default EEPROM firmware size The default EEPROM firmware is parsed and copied as a full EEPROM without checking its length. A truncated file can make the driver read beyond the firmware buffer during variant validation or the fallback copy. Reject files shorter than MT7996_EEPROM_SIZE before parsing or copying the firmware.

Affected Platforms

Unknown

Weakness Type

Unknown

References