CVE-2018-14745

HIGH Year: 2018
CVSS v3 Score
8.8
High
CVSS v2 Score
5.8
Medium
Weakness Type
CWE-119
View all →

Vulnerability Description

Buffer overflow in prot_get_ring_space in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F G920FXXU5EQH7 allows an attacker (who has obtained code execution on the Wi-Fi chip) to overwrite kernel memory due to improper validation of the ring buffer read pointer. The Samsung ID is SVE-2018-12029.

Related Vulnerabilities

CVE-2010-0037

HIGH
CVSS:8.8(High)

Buffer overflow in Image RAW in Apple Mac OS X 10.5.8 and 10.6.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted DNG image.

CWE-1192010

CVE-2010-0820

HIGH
CVSS:8.8(High)

Heap-based buffer overflow in the Local Security Authority Subsystem Service (LSASS), as used in Active Directory in Microsoft Windows Server 2003 SP2 and Windows Server 2008 Gold, SP2, and R2; Active...

CWE-1192010

CVE-2010-4314

HIGH
CVSS:8.8(High)

Remote attackers can use the iPrint web-browser ActiveX plugin in Novell iPrint Client before 5.42 for Windows XP/Vista/Win7 to execute code by overflowing the "name" parameter.

CWE-1192010

CVE-2011-2692

HIGH
CVSS:8.8(High)

The png_handle_sCAL function in pngrutil.c in libpng 1.0.x before 1.0.55, 1.2.x before 1.2.45, 1.4.x before 1.4.8, and 1.5.x before 1.5.4 does not properly handle invalid sCAL chunks, which allows rem...

CWE-1192011

CVE-2011-3191

HIGH
CVSS:8.8(High)

Integer signedness error in the CIFSFindNext function in fs/cifs/cifssmb.c in the Linux kernel before 3.1 allows remote CIFS servers to cause a denial of service (memory corruption) or possibly have u...

CWE-1192011

CVE-2011-3406

HIGH
CVSS:8.8(High)

Buffer overflow in Active Directory, Active Directory Application Mode (ADAM), and Active Directory Lightweight Directory Service (AD LDS) in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2,...

CWE-1192011