logo
DATABASE RESOURCES PRICING ABOUT US

CVE-2020-28926

Description

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.


Affected Software


CPE Name Name Version
readymedia_project:readymedia readymedia project readymedia 1.3.0
debian:debian_linux debian debian linux 9.0
debian:debian_linux debian debian linux 10.0

Related