CVE-2018-3903: Buffer Overflow
On Samsung SmartThings Hub STH-ETH-250 devices with firmware version 0.20.17, the video-core process incorrectly extracts fields from a user-controlled JSON payload, leading to a buffer overflow on the stack. An attacker can send an HTTP request to trigger this vulnerability. The memcpy call overflows the destination buffer, which has a size of 512 bytes. An attacker can send an arbitrarily long "url" value in order to overwrite the saved-PC with 0x42424242.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3903?
CVE-2018-3903 is classified as a critical vulnerability due to the potential for remote code execution caused by a buffer overflow.
How do I fix CVE-2018-3903?
To mitigate CVE-2018-3903, users should update their Samsung SmartThings Hub to the latest firmware version provided by Samsung.
What devices are affected by CVE-2018-3903?
CVE-2018-3903 affects Samsung SmartThings Hub STH-ETH-250 devices running firmware version 0.20.17.
How can an attacker exploit CVE-2018-3903?
An attacker can exploit CVE-2018-3903 by sending a specifically crafted HTTP request to the vulnerable device.
What consequences can result from CVE-2018-3903?
Exploitation of CVE-2018-3903 can lead to a buffer overflow, potentially allowing remote attackers to execute arbitrary code.