Buffer Overflow Vulnerability in Realtek RTL8195A Wi-Fi Module

CVE-2020-25854

What is CVE-2020-25854?

The Realtek RTL8195A Wi-Fi Module has a vulnerability in the DecWPA2KeyData() function that fails to validate the size parameter in its internal functions, leading to a stack buffer overflow. This vulnerability can be exploited by an attacker impersonating an Access Point, enabling them to inject specially crafted packets into the WPA2 handshake process. To carry out the attack, the attacker must possess knowledge of the network's Pre-Shared Key (PSK), allowing for potential remote code execution or denial of service against a vulnerable Wi-Fi client.

References