CVE-2023-33476
CriticalCVSS 9.8Exploitation Probability (EPSS)
High risk79th percentile - higher than 79% of all known CVEs
Summary
ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding.
Risk Assessment
An attacker can exploit this vulnerability to read or write data outside the allocated buffer, potentially leading to unauthorized access or system crashes.
Recommendation
It is recommended to update ReadyMedia (MiniDLNA) to the latest version to mitigate this vulnerability.
Original NVD description (English source)
ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.