CVE-2021-43573

A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10

published November 11, 2021

CVSS
—
EPSS
1%
Percentile
65.5
In the wild
Unconfirmed
What it is

⚠️ A malformed IE length in Wi-Fi frames triggers a sneaky buffer overflow on Realtek RTL8195AM devices — an inviting door left ajar! 🔥 Think of it like a delivery service misreading an oversized package label; the system gets overwhelmed by data it can't handle, leading to a messy spill of information. An attacker could potentially exploit this overflow to crash the device or run arbitrary code, leaving it as vulnerable as a house with its windows wide open. While details on a direct exploit are scarce, the implications could still disrupt network connectivity and functionality.

Put simply

Think of it like a delivery service misreading an oversized package label; the system gets overwhelmed by data it can't handle, leading to a messy spill of information. This vulnerability exists in the client code of the Realtek RTL8195AM when it improperly processes the HT capability information in Beacon and Association response frames, causing a buffer overflow.

What to do

An attacker could potentially exploit this overflow to crash the device or run arbitrary code, leaving it as vulnerable as a house with its windows wide open. While details on a direct exploit are scarce, the implications could still disrupt network connectivity and functionality. Update the Realtek RTL8195AM devices to version 2.0.10 or later to patch this vulnerability. Regularly check for updates and apply patches promptly to ensure ongoing protection. You've got this! Stay proactive with updates, and you’ll keep your devices secure and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01104 · 65.5th percentile
Published
2021-11-11T03:58Z
EPSS history
Timeline
  • 11 NOV 03:58Z
    A buffer overflow was discovered on Realtek RTL8195AM devices before 2.0.10
    cvelistv5