Null pointer dereference

A NULL pointer dereference in dhdprottxdatawriteflush in drivers/net/wireless/bcmdhd4358/dhdmsgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause the device to reboot. The Samsung ID is...

Buffer overflow

Buffer overflow in dhdbusflowringflushresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory accesses. The Samsung ID is...

Buffer overflow

Buffer overflow in dhdbusflowringdeleteresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14855

Buffer overflow in dhdbusflowringflushresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory accesses. The Samsung ID is...

CVE-2018-14856

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14852

Out-of-bounds array access in dhdrxframe in drivers/net/wireless/bcmdhd4358/dhdlinux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause invalid accesses to operating system memory due to...

CVE-2018-14853

A NULL pointer dereference in dhdprottxdatawriteflush in drivers/net/wireless/bcmdhd4358/dhdmsgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause the device to reboot. The Samsung ID is...

CVE-2018-14854

Buffer overflow in dhdbusflowringdeleteresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

Buffer overflow

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

Input validation

Out-of-bounds array access in dhdrxframe in drivers/net/wireless/bcmdhd4358/dhdlinux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause invalid accesses to operating system memory due to...

CVE-2018-14852

CVE-2018-14852 concerns the Samsung Galaxy S6 SM-G920F with the bcmdhd4358 Wi‑Fi driver. The issue is an out-of-bounds array access in the dhd_rx_frame function (drivers/net/wireless/bcmdhd4358/dhd_linux.c) caused by improper validation of the network interface index reported by the Wi‑Fi chip fi...

CVE-2018-14855

The CVE refers to a buffer overflow in the bcmdhd4358 Wi‑Fi driver (Samsung Galaxy S6) specifically in the dhd_pcie.c functions dhd_bus_flow_ring_flush_response and related flow/control ring handling. Affected device: Galaxy S6 with the bcmdhd4358 driver (SM-G920F/G920FXXU5EQH7). Root cause: buff...

CVE-2018-14856

Buffer overflow in dhdbusflowringcreateresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

CVE-2018-14854

CVE-2018-14854 concerns a buffer overflow in the bcmdhd4358 Wi‑Fi driver (drivers/net/wireless/bcmdhd4358/dhd_pcie.c) on the Samsung Galaxy S6 (SM-G920F, firmware G920FXXU5EQH7). The flaw occurs in the dhd_bus_flow_ring_delete_response path and allows an attacker with code execution on the Wi‑Fi ...

CVE-2018-14853

A NULL pointer dereference in dhdprottxdatawriteflush in drivers/net/wireless/bcmdhd4358/dhdmsgbuf.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker who has obtained code execution on the Wi-Fi chip to cause the device to reboot. The Samsung ID is...

CVE-2018-14853

The CVE-2018-14853 issue affects the Samsung Galaxy S6 (SM-G920F, firmware G920FXXU5EQH7) and specifically the bcmdhd4358 Wi‑Fi driver. A NULL pointer dereference in dhd_prot_txdata_write_flush (drivers/net/wireless/bcmdhd4358/dhd_msgbuf.c) can be triggered by an attacker who has code execution o...

CVE-2018-14855

Buffer overflow in dhdbusflowringflushresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory accesses. The Samsung ID is...

CVE-2018-14854

Buffer overflow in dhdbusflowringdeleteresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker who has obtained code execution on the Wi-Fi chip to cause the device driver to perform invalid memory...

Transcend Wi-Fi SD Card Cross Site Request Forgery / Traversal Vulnerabilities

Transcend Wi-Fi SD Card 16GB with firmware 1.8 suffers from cross site request forgery and directory traversal vulnerabilities. There are Directory Traversal and Cross-Site Request Forgery vulnerabilities in Transcend Wi-Fi SD Card. ------------------------- Affected products:...

Transcend Wi-Fi SD Card Cross Site Request Forgery / Traversal

Hello list! There are Directory Traversal and Cross-Site Request Forgery vulnerabilities in Transcend Wi-Fi SD Card. ------------------------- Affected products: ------------------------- Vulnerable is the next model: Transcend Wi-Fi SD Card 16 GB, Firmware v.1.8. This model with other firmware...