CVE-2023-6322

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger this vulnerability.

Score

CVSS 3.1 8.8 High

Status

Analyzed - cve-requests@bitdefender.com

Published

2024-05-15

Last modified

2024-08-02

Weaknesses

CWE-121, CWE-787

Affected products

• Indoor Camera Se (Roku)
• Indoor Camera Se Firmware (Roku)
• Kalay Platform (Throughtek)
• Cam V3 (Wyze)
• Cam V3 Firmware (Wyze)

References

• https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/