Buffer Overflow in bcmdhd4358 Wi-Fi Driver on Samsung Galaxy S6 SM-G920F (SVE-2018-12029)

CVE-2018-14745 · MEDIUM Severity

AV:A/AC:L/AU:N/C:P/I:P/A:P

Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is SVE-2018-12029.

Learn more about our Web Application Penetration Testing UK.