Stack Buffer Overflow in Realtek RTL8195A Wi-Fi Module
CVE-2020-25857

7.5HIGH

Key Information:

Vendor

Realtek

Status
Realtek Rtl8195a Wi-fi Module
Vendor
CVE Published:
3 February 2021

What is CVE-2020-25857?

The Realtek RTL8195A Wi-Fi Module has a vulnerability in the ClientEAPOLKeyRecvd() function that fails to properly validate the size parameter during the rtl_memcpy() operation. This oversight permits a stack buffer overflow, which can be leveraged by an attacker impersonating an Access Point. By injecting a specially crafted packet into the WPA2 handshake, the attacker can compromise a vulnerable Wi-Fi client, without needing knowledge of the network's Pre-Shared Key (PSK).

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Realtek RTL8195A Wi-Fi Module Versions before 2020-04-21 (up to and excluding 2.08)

References

https://www.vdoo.com/blog/realtek-rtl8195a-vulnerabilitie...
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.