CVE-2020-26144Medium· 6.5▾ SunlitAn issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. A…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 35.8 · likelihood 1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Oct 8.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
4.9%
An issue was discovered on Samsung Galaxy S3 i9305 4.4.4 devices. The WEP, WPA, WPA2, and WPA3 implementations accept plaintext A-MSDU frames as long as the first 8 bytes correspond to a valid RFC1042 (i.e., LLC/SNAP) header for EAPOL. An adversary can abuse this to inject arbitrary network packets independent of the network configuration.
galaxy_i9305_firmware = 4.4.4c-250_firmware < 10.0.1-31c-260_firmware < 10.0.1-31c-230_firmware < 10.0.1-31c-235_firmware < 10.0.1-31c-200_firmware < 11.0.0-36c-120_firmware < 11.0.0-36c-130_firmware < 11.0.0-36c-100_firmware < 11.0.0-36c-110_firmware < 11.0.0-36o-105_firmware < 11.0.0-36w-118_firmware < 11.0.0-36c-75_firmwareo-90_firmwarec-65_firmwarew-68_firmwarescalance_w700_ieee_802.11ax_firmwarescalance_w700_ieee_802.11n_firmwareUpgrade past the affected range:
c-250_firmware 10.0.1-31c-260_firmware 10.0.1-31c-230_firmware 10.0.1-31c-235_firmware 10.0.1-31c-200_firmware 11.0.0-36c-120_firmware 11.0.0-36c-130_firmware 11.0.0-36c-100_firmware 11.0.0-36c-110_firmware 11.0.0-36o-105_firmware 11.0.0-36w-118_firmware 11.0.0-36Connected by shared product, vendor, weakness, or advisory.
CVE-2026-21112Medium· 5.5Improper input validation in Samsung Tips prior to Android 17 allows local attackers to launch arbitrary activity with Samsung Tips privilege
CVE-2026-21089High· 7.8Improper input validation in removing style tag in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21094High· 8.8Improper input validation in wpa_supplicant prior to SMR Sep-2026 Release 1 allows adjacent attackers to write out-of-bounds memory.
CVE-2026-21088High· 7.8Improper input validation in loading a subtitle frame in libsubextractor.so prior to SMR Sep-2026 Release 1 allows local attackers to write out-of-bounds memory.
CVE-2026-21086High· 7.8Improper authorization in ProxyHandler prior to SMR Aug-2026 Release 1 allows local attackers to access proxy configuration.
CVE-2021-36325High· 7.5Dell BIOS contains an improper input validation vulnerability