Samsung Exynos Wi-Fi driver vulnerabilities

In the Wi-Fi module of Samsung Exynos 850, 1280, 1330, 1380, 1480, 2400, W920, and W930 processors, a malformed Netlink command can trigger an out-of-bounds read, potentially leading to information leakage.

In Samsung Exynos 1330, 1380, 1480, 1580, 1680, W920, W930, and W1000 processors, a malformed ioctl command to the Wi-Fi interface device can lead to improper buffer size allocation, resulting in an out-of-bounds write and causing a denial of service (DoS).

A synchronization issue in the Wi-Fi driver of Samsung Exynos and Wearable processors leads to a double-free vulnerability. An attacker can trigger a race condition by concurrently invoking the ioctl function from multiple threads.

A synchronization issue in the Wi-Fi driver of Samsung Exynos processors leads to a use-after-free vulnerability. An attacker can trigger a race condition by concurrently invoking the ioctl function from multiple threads.