Stack-Based Buffer Overflow in Samsung SmartThings Hub by Samsung

CVE-2018-3867

What is CVE-2018-3867?

A vulnerability exists in the Samsung SmartThings Hub STH-ETH-250, where a stack-based buffer overflow may be exploited through improper handling of HTTP requests in the video-core's HTTP server. This security issue arises when handling notifications from a connected smart camera, which can lead to an overflow condition, allowing a remote attacker to execute harmful commands or disrupt service.

References