← Back

CVE-2023-33476

nvd nist
Published: Jun 2, 2023Modified: Jan 8, 2025

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.

Affected (1)

Readymedia
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
From 1.1.15 to 1.3.2

References (12)

Timeline

No history available yet.