CVE-2023-49236

2024-01-0900:00:00

mitre

www.cve.org

cve-2023-49236

stack-based buffer overflow

arbitrary command execution

rtsp playback function

lack of length validation

user-entered scale field

davinci

10 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.0%

JSON

A stack-based buffer overflow was discovered on TRENDnet TV-IP1314PI 5.5.3 200714 devices, leading to arbitrary command execution. This occurs because of lack of length validation during an sscanf of a user-entered scale field in the RTSP playback function of davinci.