CVE-2018-3926

An exploitable integer underflow vulnerability exists in the ZigBee firmware update routine of the hubCore binary of the Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process incorrectly handles malformed files existing in its data directory, leading to an infinite loop, which eventually causes the process to crash. An attacker can send an HTTP request to trigger this vulnerability.

• CWE-191

• http://www.securityfocus.com/bid/105162Broken Link, Third Party Advisory, VDB Entry
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0593Exploit, Third Party Advisory
• http://www.securityfocus.com/bid/105162Broken Link, Third Party Advisory, VDB Entry
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0593Exploit, Third Party Advisory

Published

Aug 28, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-3920An exploitable code execution vulnerability exists in the fi…6.8
• CVE-2018-3921A memory corruption vulnerability exists in the PSD-parsing …7.8
• CVE-2018-3922A memory corruption vulnerability exists in the ANI-parsing …7.8
• CVE-2018-3923A memory corruption vulnerability exists in the PCX-parsing …7.8
• CVE-2018-3924An exploitable use-after-free vulnerability exists in the Ja…8.8
• CVE-2018-3925An exploitable buffer overflow vulnerability exists in the r…8.5
• CVE-2018-3927An exploitable information disclosure vulnerability exists i…6.8
• CVE-2018-3928An exploitable code execution vulnerability exists in the fi…7.5
• CVE-2018-3929An exploitable heap corruption exists in the PowerPoint docu…7.8
• CVE-2018-3930In Antenna House Office Server Document Converter version V6…7.8
• CVE-2018-3931In Antenna House Office Server Document Converter version V6…7.8
• CVE-2018-3932An exploitable stack-based buffer overflow exists in the Mic…8.8