Buffer Overflow Vulnerability in Samsung SmartThings Hub HTTP Server

CVE-2018-3875

Summary

A buffer overflow vulnerability was identified in the credentials handler of the video-core HTTP server on the Samsung SmartThings Hub. This issue arises when the video-core process improperly handles user-provided JSON payloads, leading to stack overflow conditions. Specifically, the strncpy function can overflow a destination buffer of 2,000 bytes when it processes an excessively long 'sessionToken'. Attackers can exploit this flaw to inject malicious data, potentially compromising the security of affected devices.

References