Description
An issue was discovered in the Wi-Fi driver in Samsung Mobile Processor and Wearable Processor Exynos 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. Incorrect Handling of the NL80211 vendor command leads to a buffer overflow via a certain ioctl message, issue 2 of 2.
Affected products
samsung: exynos w1000 firmware; samsung: exynos w1000; samsung: exynos w920 firmware; samsung: exynos w920; samsung: exynos w930 firmware; samsung: exynos w930; samsung: exynos 980 firmware; samsung: exynos 980; samsung: exynos 850 firmware; samsung: exynos 850; samsung: exynos 1580 firmware; samsung: exynos 1580; samsung: exynos 1480 firmware; samsung: exynos 1480; samsung: exynos 1380 firmware
References2
- semiconductor.samsung.com/support/quality-support/product-secur… Vendor Advisory
- semiconductor.samsung.com/support/quality-support/product-secur… Vendor Advisory
Metrics
- CVSS 3.1
-
9.8
CRITICAL
Score source: CNA
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - EPSS — exploit probability
- 1% percentile: 44 · as of 12 November 2026
- CWE
- CWE-120
Could this be exploited in your environment?
A patch closes the known hole. A penetration test shows what an attacker can still reach — with proof.