CVE-2020-25856

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

CVE-2020-25854

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...

Stack overflow

The function CheckMic in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtmd5hmacveneer or rthmacsha1veneer, resulting in a stack buffer over-read which can be exploited for denial ...

CVE-2020-25854

The CVE-2020-25854 issue affects Realtek RTL8195A Wi‑Fi Module before April 2020 (up to but excluding 2.08). The DecWPA2KeyData() path does not validate the size for internal veneers rt_arc4_crypt_veneer() or _AES_UnWRAP_veneer(), causing a stack buffer overflow that can enable remote code execut...

CVE-2020-25854

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...

CVE-2020-25855

The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...

CVE-2020-25856

Summary: CVE-2020-25856 affects Realtek RTL8195A Wi‑Fi Module. A stack buffer overflow exists in DecWPA2KeyData() due to unvalidated size in an rtl_memcpy() call for versions released before April 2020 (up to and excluding 2.08). This can be exploited to achieve remote code execution or denial of...

CVE-2020-25856

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

Stack overflow

In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457070...

CVE-2021-0362

In aee, there is a possible memory corruption due to a stack buffer overflow. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Product: Android; Versions: Android-11; Patch ID: ALPS05457070...

PT-2021-11189

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow in the DecWPA2KeyData function, which can be exploited for remote code execution or denial of service. This can occur when an attacke...

CVE-2020-25855: Stack-based Buffer Overflow

The function AESUnWRAP in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for a memcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An...

PT-2021-11190

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue arises from the function ClientEAPOLKeyRecvd not validating the size parameter for an rtl memcpy operation, leading to a stack buffer overflow. This can be exploited...

PT-2021-11188

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow due to a lack of validation for the size parameter in a memcpy operation within the AES UnWRAP function. This can be exploited for...

CVE-2020-25854: Stack-based Buffer Overflow

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an internal function, rtarc4cryptveneer or AESUnWRAPveneer, resulting in a stack buffer overflow which can be exploited for...

CVE-2020-25857: Stack-based Buffer Overflow

The function ClientEAPOLKeyRecvd in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker c...

PT-2021-11187

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue concerns a stack buffer overflow in the DecWPA2KeyData function, which can be exploited for remote code execution or denial of service. This can occur when an attacke...

PT-2021-11186

Name of the Vulnerable Software and Affected Versions: Realtek RTL8195A Wi-Fi Module versions prior to 2.08 Description: The issue arises from the function CheckMic not validating the size parameter for internal functions rt md5 hmac veneer or rt hmac sha1 veneer, resulting in a stack buffer...

CVE-2020-25856: Stack-based Buffer Overflow

The function DecWPA2KeyData in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 up to and excluding 2.08 does not validate the size parameter for an rtlmemcpy operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of...

CVE-2021-0362

CVE-2021-0362 affects Android 11 as described across multiple sources. The vulnerability is a memory corruption via a stack buffer overflow in the aee component, enabling local privilege escalation with System-level execution privileges. Exploitation does not require user interaction. Patch ALPS0...