CVE-2020-25857

The function ClientEAPOLKeyRecvd in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker c...

CVE-2020-25857

Realtek RTL8195A Wi‑Fi Module is affected: the function ClientEAPOLKeyRecvd() fails to validate the size parameter for an rtl_memcpy(), causing a stack buffer overflow in versions prior to 2.08 (released by April 2020). This can allow a remote attacker to impersonate an Access Point and inject a ...