securesystemslab

2 exploits Active since Dec 2018
CVE-2018-14855 WRITEUP MEDIUM WRITEUP
Samsung Galaxy S6 Firmware - Buffer Overflow in dhd_bus_flow_ring_flush_response
Buffer overflow in dhd_bus_flow_ring_flush_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785.
CVSS 6.3
CVE-2018-14856 WRITEUP MEDIUM WRITEUP
Samsung Galaxy S6 Firmware - Buffer Overflow in dhd_bus_flow_ring_create_response
Buffer overflow in dhd_bus_flow_ring_create_response in drivers/net/wireless/bcmdhd4358/dhd_pcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allow an attacker (who has obtained code execution on the Wi-Fi) chip to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785.
CVSS 6.3