CVE-2018-3916

An exploitable stack-based buffer overflow vulnerability exists in the retrieval of database fields in the video-core HTTP server of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The strcpy call overflows the destination buffer, which has a size of 136 bytes. An attacker can...

CVE-2018-3916

CVE-2018-3916 affects Samsung SmartThings Hub STH-ETH-250 (Firmware 0.20.17). The video-core HTTP server retrieves shard table fields via SELECT and then copies values into a fixed-size stack structure using strcpy, with vulnerable buffers including directory (136 bytes), secretKey (128 bytes), a...