A buffer overflow exists in the NXP moal.ko Wi‑Fi driver within the woal_init_module_param function, triggered by the mod_para parameter. This flaw can corrupt memory boundaries, allowing an attacker to overwrite control data and potentially execute arbitrary code with kernel privileges. Depending on the exact memory layout, the corruption could also lead to a denial‑of‑service by crashing the driver.

The vulnerability affects NXP Wi‑Fi driver firmware versions from v17.92.1.p149.43 through v17.92.1.p149.157. Systems deploying these firmware releases, commonly found in embedded networking equipment and routers that use NXP’s wireless modules, are at risk.

The CVSS score of 5.6 indicates moderate severity, and the EPSS score is below 1%, suggesting a very low exploitation probability. The issue is not reported in the CISA KEV catalog, implying no confirmed public exploits yet. Driver parameters are often controllable by local users, so the attack vector is likely local but could be leveraged remotely if an attacker can influence module loading or configuration. Until a patched firmware is released, the risk remains significant for devices that allow the vulnerable module to be loaded with arbitrary parameters.