Stack overflow

The function ClientEAPOLKeyRecvd in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker c...

Stack overflow

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...

Stack overflow

The function CheckMic in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtmd5hmacveneer or rthmacsha1veneer, resulting in a stack buffer over-read which can be exploited for denial ...

Stack overflow

The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...

Stack overflow

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

CVE-2020-25853

The Realtek RTL8195A Wi‑Fi Module is affected by CVE-2020-25853. In affected builds released before April 2020 (up to but excluding 2.08), CheckMic() does not validate the size parameter for internal functions _rt_md5_hmac_veneer() or _rt_hmac_sha1_veneer(), leading to a stack buffer over-read. T...

CVE-2020-25854

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...

CVE-2020-25855

The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...

CVE-2020-25855

The CVE-2020-25855 issue affects Realtek RTL8195A Wi‑Fi Module: the AES_UnWRAP() path does not validate the size for a memcpy(), causing a stack buffer overflow. This can enable remote code execution or denial of service when an attacker impersonates an AP and injects a crafted WPA2 handshake pac...

CVE-2020-25856

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

CVE-2020-25857

The function ClientEAPOLKeyRecvd in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker c...

CVE-2020-25857

Realtek RTL8195A Wi‑Fi Module is affected: the function ClientEAPOLKeyRecvd() fails to validate the size parameter for an rtl_memcpy(), causing a stack buffer overflow in versions prior to 2.08 (released by April 2020). This can allow a remote attacker to impersonate an Access Point and inject a ...

CVE-2020-25856: Stack-based Buffer Overflow

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

CVE-2020-25853: Buffer Over-read

The function CheckMic in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtmd5hmacveneer or rthmacsha1veneer, resulting in a stack buffer over-read which can be exploited for denial ...

PT-2021-11189

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow in the DecWPA2KeyData function, which can be exploited for remote code execution or denial of service. This can occur when an attacke...

CVE-2020-25854: Stack-based Buffer Overflow

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...

PT-2021-11187

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow in the DecWPA2KeyData function, which can be exploited for remote code execution or denial of service. This can occur when an attacke...

PT-2021-11186

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue arises from the function CheckMic not validating the size parameter for internal functions rt md5 hmac veneer or rt hmac sha1 veneer, resulting in a stack buffer...

PT-2021-11188

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow due to a lack of validation for the size parameter in a memcpy operation within the AES UnWRAP function. This can be exploited for...

CVE-2020-25855: Stack-based Buffer Overflow

The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...