A heap-based buffer overflow exists in the Morse Micro HaLowLink 2 "morse.ko" Wi‑Fi kernel driver. When a beacon frame containing a malformed Traffic Indication Map Information Element is processed, the driver copies the TIM bitmap without bounds checking. This allows an attacker to inject up to 252 bytes of data beyond the destination buffer. Writing beyond the buffer can trigger a kernel panic (denial of service) or, if the overflow leads to execution of attacker‑controlled code, remote code execution with kernel privileges.

Morse Micro HaLowLink 2 firmware prior to version 2.11.13. The issue affects all systems running the HaLow Wi‑Fi kernel driver "morse.ko" on this platform. Devices that receive beacon frames in the same radio range as the target are vulnerable.

The flaw can be abused by anyone within radio range without prior authentication, association or user interaction, because beacon frames are broadcast during passive scanning. Although an EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, the high severity of a kernel‑level buffer overflow and the potential for remote code execution make the risk substantial. Attackers with knowledge of malformed beacon construction could readily deploy the exploit, especially on poorly secured wireless networks.