CVE-2022-47364
NixOS vulnerability analysis and mitigation

Overview

In the wlan driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services. The vulnerability (CVE-2022-47364) affects the wlan driver component, where improper input validation could lead to out of bounds write operations (MITRE).

Technical details

The vulnerability exists in the wlan driver where there is a missing bounds check that could allow an out of bounds write operation. This type of vulnerability typically occurs when the software fails to validate input properly before using it to perform memory operations. The severity of this issue is significant as it could lead to denial of service conditions (MITRE).

Impact

The primary impact of this vulnerability is a potential local denial of service in wlan services. When exploited, it could cause system instability or crashes, affecting the availability of wireless network services (MITRE).

Additional resources


SourceThis report was generated using AI

Related NixOS vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2025-69264CRITICAL9.8
  • JavaScriptJavaScript
  • pnpm
NoYesJan 07, 2026
CVE-2025-69263HIGH8.8
  • JavaScriptJavaScript
  • pnpm
NoYesJan 07, 2026
CVE-2025-69262HIGH7.8
  • JavaScriptJavaScript
  • pnpm
NoYesJan 07, 2026
CVE-2025-20807MEDIUM6.7
  • NixOSNixOS
  • android
NoNoJan 06, 2026
CVE-2026-21885MEDIUM6.5
  • NixOSNixOS
  • miniflux
NoYesJan 08, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management