Stack Buffer Over-read Vulnerability in Realtek RTL8195A Wi-Fi Module

CVE-2020-25853

What is CVE-2020-25853?

The Realtek RTL8195A Wi-Fi Module contains a vulnerability in its CheckMic() function that fails to properly validate size parameters for certain internal operations. This vulnerability can allow an attacker to perform a stack buffer over-read, which could lead to a denial of service. By impersonating an Access Point and injecting specially crafted packets during the WPA2 handshake process, an attacker could exploit this weakness without knowledge of the network's pre-shared key (PSK). Users are encouraged to update to the latest version released in April 2020 or later to mitigate potential risks.

References