Realtek

Records80All Threatist records

Exploited (KEV)3In CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high52CVSS 7.0–8.9

Exploited now

Realtek records in CISA KEV

TI-2014-06873 Realtek SDK Improper Input Validation Vulnerability CRITICAL 100KEV 2023-09-18 TI-2021-14192 Realtek Jungle SDK Remote Code Execution Vulnerability CRITICAL 100KEV 2021-12-10 TI-2021-14193 Realtek AP-Router SDK Buffer Overflow Vulnerability CRITICAL 100KEV 2021-11-03

Components

Products in the NVD configurations · select one to filter the records

Rtl819x Jungle Software Development Kit 23 records CRITICAL Rtl8195a Firmware 7 records MEDIUM Wi-fi Usb Driver 5 records LOW Bluetooth Mesh Software Development Kit 4 records LOW Rtl8195am Firmware 4 records MEDIUM Rtsper 4 records HIGH Rtsuer 4 records HIGH Rtsupx Usb Utility Driver 4 records LOW

Records

7 records in Rtl8195a Firmware · all components

TI-2020-15845 CVE-2020-25856 · GHSA-9rrj-w544-7vw9

Stack-based buffer overflow in Realtek RTL8195A Wi-Fi Module

MEDIUM 40

The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a st…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.02253 Published 2021-02-03 No fix listed CWE-121

TI-2020-15844 CVE-2020-25855 · GHSA-h76m-vvhh-g679

Stack-based buffer overflow in Realtek RTL8195A Wi-Fi Module

MEDIUM 40

The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for a memcpy() operation, resulting in a stack buffe…

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0275 Published 2021-02-03 No fix listed CWE-121

TI-2020-15843 CVE-2020-25854 · GHSA-8q7x-wx54-w95j

Stack-based buffer overflow in Realtek RTL8195A Wi-Fi Module

MEDIUM 40

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.0275 Published 2021-02-03 No fix listed CWE-121

TI-2020-16621 CVE-2020-27302 · GHSA-x8rx-53qq-29mq

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to…

LOW 39

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.02009 Published 2021-06-04 No fix listed CWE-787

TI-2020-16620 CVE-2020-27301 · GHSA-wvw2-928h-x7m8

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to…

LOW 39

A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of…

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.01991 Published 2021-06-04 No fix listed CWE-787

TI-2020-15846 CVE-2020-25857 · GHSA-fx3j-9hj4-xrxm

Stack-based buffer overflow in Realtek RTL8195A Wi-Fi Module

LOW 35

The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01244 Published 2021-02-03 No fix listed CWE-121

TI-2020-15842 CVE-2020-25853 · GHSA-cf46-h25j-9pmq

Out-of-bounds read in Realtek RTL8195A Wi-Fi Module

LOW 35

The function CheckMic() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an internal function, _rt_md5_hmac_veneer() or _rt…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01263 Published 2021-02-03 No fix listed CWE-126

Open these records in search →