Buffer Overflow Vulnerability in Microchip Wireless Chipset

CVE-2025-39952

What is CVE-2025-39952?

A vulnerability exists in the Microchip WILC1000 wireless chipset firmware that could allow a buffer overflow due to improper handling of WID string configurations. The issue is rooted in a failure to verify the size of the incoming data against the allocated buffer during the parsing of response frames. The correction adds necessary size checks based on the WID type of the data received, preventing potential overflow and ensuring the safe operation of the device.

References