Stack Buffer Overflow in Realtek RTL8195A Wi-Fi Module

CVE-2020-25857

What is CVE-2020-25857?

The Realtek RTL8195A Wi-Fi Module has a vulnerability in the ClientEAPOLKeyRecvd() function that fails to properly validate the size parameter during the rtl_memcpy() operation. This oversight permits a stack buffer overflow, which can be leveraged by an attacker impersonating an Access Point. By injecting a specially crafted packet into the WPA2 handshake, the attacker can compromise a vulnerable Wi-Fi client, without needing knowledge of the network's Pre-Shared Key (PSK).

References