Stack-based Buffer Overflow in Samsung SmartThings Hub Devices

CVE-2018-3919

What is CVE-2018-3919?

A stack-based buffer overflow vulnerability has been identified in the video-core's HTTP server of the Samsung SmartThings Hub (STH-ETH-250) devices running firmware version 0.20.17. This flaw resides in the way the video-core process handles the retrieval of database fields, particularly from the 'clips' table in its SQLite database. By sending a crafted series of HTTP requests, an attacker can exploit this vulnerability, potentially leading to unauthorized actions or system instability. It is crucial for users of affected devices to apply security updates promptly to mitigate this risk.

References