Stack Buffer Overflow in Realtek Wi-Fi Module Affects Remote Code Execution

CVE-2020-25856

What is CVE-2020-25856?

The Realtek RTL8195A Wi-Fi Module is susceptible to a stack buffer overflow due to improper size validation in the DecWPA2KeyData() function before version 2.08. This flaw can be exploited by attackers to perform remote code execution or denial of service attacks. By impersonating an Access Point and injecting a malicious packet during the WPA2 handshake, an attacker, equipped with knowledge of the network's Pre-Shared Key (PSK), can successfully launch an attack against vulnerable Wi-Fi clients.

References