Felicitas Hetzelt

**Name of the Vulnerable Software and Affected Versions** bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F version G920FXXU5EQH7 **Description** The issue is related to a buffer overflow in the `prot get ring space` function of the bcmdhd4358 Wi-Fi driver. This occurs due to improper validation of the ring buffer read pointer, allowing an attacker who has obtained code execution on the Wi-Fi chip to overwrite kernel memory. **Recommendations** For the bcmdhd4358 Wi-Fi driver on the Samsung Galaxy S6 SM-G920F version G920FXXU5EQH7, at the moment, there is no information about a newer version that contains a fix for this issue.