Realtek RTL8195A

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:h:realtek:rtl8195a:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorRealtek (9c8a6606-8769-5ca0-be4a-9f8922266f07)
ProductRtl8195A (c095a1b7-27ee-56b7-9925-a79286aac453)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27302 not_vulnerable 2026-06-08 05:23:52.572458 Details available
A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "memcpy" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake.
Published: 2021-06-04T12:24:41.000Z
Updated: 2024-08-04T16:11:36.582Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-27301 not_vulnerable 2026-06-08 05:23:52.571788 Details available
A stack buffer overflow in Realtek RTL8710 (and other Ameba-based devices) can lead to remote code execution via the "AES_UnWRAP" function, when an attacker in Wi-Fi range sends a crafted "Encrypted GTK" value as part of the WPA2 4-way-handshake.
Published: 2021-06-04T12:24:37.000Z
Updated: 2024-08-04T16:11:36.577Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25857 not_vulnerable 2026-06-08 05:23:49.574243 Details available
The function ClientEAPOLKeyRecvd() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which can be exploited for denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker does not need to know the network's PSK.
Published: 2021-02-03T16:48:59.000Z
Updated: 2024-08-04T15:49:05.909Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25856 not_vulnerable 2026-06-08 05:23:49.573751 Details available
The function DecWPA2KeyData() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for an rtl_memcpy() operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker needs to know the network's PSK in order to exploit this.
Published: 2021-02-03T16:49:02.000Z
Updated: 2024-08-04T15:49:05.936Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25855 not_vulnerable 2026-06-08 05:23:49.573317 Details available
The function AES_UnWRAP() in the Realtek RTL8195A Wi-Fi Module prior to versions released in April 2020 (up to and excluding 2.08) does not validate the size parameter for a memcpy() operation, resulting in a stack buffer overflow which can be exploited for remote code execution or denial of service. An attacker can impersonate an Access Point and attack a vulnerable Wi-Fi client, by injecting a crafted packet into the WPA2 handshake. The attacker needs to know the network's PSK in order to exploit this.
Published: 2021-02-03T16:49:05.000Z
Updated: 2024-08-04T15:49:05.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25854 not_vulnerable 2026-06-08 05:23:49.572697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-25853 not_vulnerable 2026-06-08 05:23:49.572120 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.