CVE-2019-5065

2019-09-0517:15:00

Google

osv.dev

6.2 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.6%

JSON

An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.

CPENameOperatorVersion
blynk-libraryeq0.2.0
blynk-libraryeq0.4.8
blynk-libraryeq0.2.1
blynk-libraryeq0.4.0
blynk-libraryeq0.3.3
blynk-libraryeq0.6.1
blynk-libraryeq0.3.0
blynk-libraryeq0.4.2
blynk-libraryeq0.5.1
blynk-libraryeq0.3.1

Name	Operator	Version
blynk-library	eq	0.2.0
blynk-library	eq	0.4.8
blynk-library	eq	0.2.1
blynk-library	eq	0.4.0
blynk-library	eq	0.3.3
blynk-library	eq	0.6.1
blynk-library	eq	0.3.0
blynk-library	eq	0.4.2
blynk-library	eq	0.5.1
blynk-library	eq	0.3.1