Security Bulletin

CVE-2022-29859

CVEID
CVE-2022-29859
PRODUCT
RTL8195AM
VERSION
https://github.com/ambiot/amb1_sdk
commit 4b73f58f32914d0081d79a79e53a3215c8c1ea56
PROBLEM TYPE
Use after Free
DESCRIPTION
component/common/network/dhcp/dhcps.c in ambiot amb1_sdk (aka SDK for Ameba1) before 2022-03-11 mishandles data structures for DHCP packet data.
CONTRIBUTOR
chiba of topsec alphalab
Please confirm that QQ communication software is installed