Wlan Firmware to AP Kernel OOB Write in function dhd_prot_txstatus_process_each_aggr_item
Details
In BCMFASTPATH of dhd_msgbuf.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.