CVE-2025-29338 - Vulnerability Analysis
MediumCVSS: 5.6Last Updated: May 14, 2026
NXP moal.ko Wi-Fi driver - Buffer Overflow
Published: May 13, 2026Updated: May 14, 2026PoC Available
Overview
NXP moal.ko Wi-Fi driver 5.1.7.10 FW version from v17.92.1.p149.43 to v17.92.1.p149.157 contains a buffer overflow caused by improper handling of the mod_para parameter in the woal_init_module_param function, letting attackers cause memory corruption, exploit requires crafted input.
Severity & Score
Severity: Medium
CVSS Score: 5.6
Impact
Attackers can cause memory corruption leading to potential code execution or system instability.
Mitigation
Update to version v17.92.1.p149.157 or later.
References
Related Resources
Details
- CVE ID
- CVE-2025-29338
- Severity
- Medium
- CVSS Score
- 5.6
- Type
- buffer_overflow
- Status
- unconfirmed
CWE
- CWE-120
CVSS Metrics
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H