CVE-2018-14855: Buffer Overflow
Buffer overflow in dhdbusflowringflushresponse in drivers/net/wireless/bcmdhd4358/dhdpcie.c in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 allow an attacker (who has obtained code execution on the Wi-Fi chip) to cause the device driver to perform invalid memory accesses. The Samsung ID is SVE-2018-11785.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-14855?
CVE-2018-14855 is a buffer overflow vulnerability in the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6, allowing an attacker with code execution on the Wi-Fi chip to perform invalid memory accesses.
How severe is CVE-2018-14855?
CVE-2018-14855 has a severity rating of 6.3, which is considered medium.
Which software is affected by CVE-2018-14855?
CVE-2018-14855 affects the Samsung Galaxy S6 Firmware version g920fxxu5eqh7.
How can an attacker exploit CVE-2018-14855?
An attacker with code execution on the Wi-Fi chip can exploit CVE-2018-14855 to cause the device driver to perform invalid memory accesses.
Are there any references available for CVE-2018-14855?
Yes, you can find references for CVE-2018-14855 at the following links: [Link1](https://github.com/securesystemslab/periscope/blob/master/bugs-found/CVE-2018-14854_CVE-2018-14855_CVE-2018-14856.md) and [Link2](https://people.cs.kuleuven.be/~stijn.volckaert/papers/2019_NDSS_PeriScope.pdf).