CVE-2018-14852

published 2018-12-17

CVE-2018-14852: Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F…

medium 6.3 CVSS 3.0

AV A AC L PR N UI N S U C L I L A L

Out-of-bounds array access in dhd_rx_frame in drivers/net/wireless/bcmdhd4358/dhd_linux.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to cause invalid accesses to operating system memory due to improper validation of the network interface index provided by the Wi-Fi chip's firmware.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
samsung	galaxy_s6_firmware	—	—

CWE-119