Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-55226
HistoryMay 24, 2022 - 12:00 a.m.

OpenRazer buffer overflow vulnerability

2022-05-2400:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
openrazer
gnu/linux
buffer overflow
vulnerability
driver
denial of service
dos
untrusted input
razer lighting
boundary error

EPSS

0.002

Percentile

55.8%

OpenRazer is an open source driver and userspace daemon used to control Razer lighting and other functions on GNU/Linux. Used to control Razer lighting and other features on GNU/Linux, a buffer overflow vulnerability exists in OpenRazer version 3.3.0 and earlier, which stems from a boundary error in the razeraccessory driver when handling untrusted input. An attacker could exploit this vulnerability to cause a denial of service (DoS) via a specially crafted buffer sent to the matrix_custom_frame device.

EPSS

0.002

Percentile

55.8%