12 matches found
CVE-2020-25857
The function ClientEAPOLKeyRecvd in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker c...
Stack overflow
The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...
CVE-2020-25854: Stack-based Buffer Overflow
The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...
CVE-2020-25853: Buffer Over-read
The function CheckMic in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtmd5hmacveneer or rthmacsha1veneer, resulting in a stack buffer over-read which can be exploited for denial ...
PT-2021-11186
Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue arises from the function CheckMic not validating the size parameter for internal functions rt md5 hmac veneer or rt hmac sha1 veneer, resulting in a stack buffer...
CVE-2020-25855: Stack-based Buffer Overflow
The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...
PT-2021-11189
Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow in the DecWPA2KeyData function, which can be exploited for remote code execution or denial of service. This can occur when an attacke...
CVE-2020-25857: Stack-based Buffer Overflow
The function ClientEAPOLKeyRecvd in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker c...
PT-2021-11190
Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue arises from the function ClientEAPOLKeyRecvd not validating the size parameter for an rtl memcpy operation, leading to a stack buffer overflow. This can be exploited...
CVE-2020-25856: Stack-based Buffer Overflow
The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...
PT-2021-11187
Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow in the DecWPA2KeyData function, which can be exploited for remote code execution or denial of service. This can occur when an attacke...
PT-2021-11188
Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow due to a lack of validation for the size parameter in a memcpy operation within the AES UnWRAP function. This can be exploited for...