This vulnerability affects the Wi-Fi driver in Samsung Exynos processors including models 980, 850, 1280, 1330, 1380, 1480, 1580, W920, W930, and W1000. The issue is caused by improper handling of the NL80211 vendor command, which results in a buffer overflow triggered by a certain ioctl message. The CVSS v3.1 score is 9.8, indicating a critical severity with network attack vector, no required privileges or user interaction, and impacts to confidentiality, integrity, and availability. No patch or remediation level has been published, and no known exploits are reported in the wild.

Successful exploitation of this vulnerability could allow an unauthenticated attacker to execute arbitrary code or cause denial of service on affected devices. The impact includes full compromise of confidentiality, integrity, and availability of the Wi-Fi driver and potentially the device. Given the critical CVSS score, this represents a severe risk to affected Samsung Exynos-based mobile and wearable devices.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users and administrators should monitor Samsung security advisories and apply updates promptly once available. No vendor advisory or official mitigation instructions are currently provided.