An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 2 of 2.
| Vendor | Product | Versions |
|---|---|---|
| samsung | exynos_1280_firmware | n/a |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| samsung | exynos_1380_firmware | cve_cpe | 95% |
| samsung | exynos_1380 | cve_cpe | 95% |
| samsung | exynos_1330_firmware | cve_cpe | 95% |
| samsung | exynos_1480_firmware | cve_cpe | 95% |
| samsung | exynos_1580_firmware | cve_cpe | 95% |
Updated severity to CRITICAL and clarified that no exploit is available.
Initial creation