An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.
References
Link | Resource |
---|---|
https://talosintelligence.com/vulnerability_reports/TALOS-2019-0854 | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-09-05 10:15
Updated : 2022-06-27 10:28
NVD link : CVE-2019-5065
Mitre link : CVE-2019-5065
JSON object : View
CWE
CWE-125
Out-of-bounds Read
Products Affected
blynk
- blynk-library