NULL Pointer Dereference in Samsung Galaxy S6 Wi-Fi Driver
CVE-2018-14853

4.3MEDIUM

Key Information:

Vendor

Samsung
Status
Galaxy S6 Firmware
Vendor
CVE Published:
17 December 2018

What is CVE-2018-14853?

A NULL pointer dereference vulnerability exists in the dhd_prot_txdata_write_flush function within the bcmdhd4358 Wi-Fi driver used in the Samsung Galaxy S6. This vulnerability can be exploited by an attacker who gains code execution on the Wi-Fi chip, leading to unexpected device reboots. The affected version of the device is identified by the software version G920FXXU5EQH7.

References

https://github.com/securesystemslab/periscope/blob/master...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.