Lucene search

K
cvelistMitreCVELIST:CVE-2020-28926
HistoryNov 30, 2020 - 5:09 p.m.

CVE-2020-28926

2020-11-3017:09:40
mitre
www.cve.org
2

AI Score

9.9

Confidence

High

EPSS

0.071

Percentile

94.0%

ReadyMedia (aka MiniDLNA) before versions 1.3.0 allows remote code execution. Sending a malicious UPnP HTTP request to the miniDLNA service using HTTP chunked encoding can lead to a signedness bug resulting in a buffer overflow in calls to memcpy/memmove.