Lucene search
PRIOn knowledge basePRION:CVE-2018-3900HistoryNov 01, 2018 - 3:29 p.m.
Buffer overflow
2018-11-0115:29:00
PRIOn knowledge base
www.prio-n.com
2
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. An attacker can make the camera scan a QR code to trigger this vulnerability. Alternatively, a user could be convinced to display a QR code from the internet to their camera, which could exploit this vulnerability.
| CPE | Name | Operator | Version |
|---|---|---|---|
| yi_home_camera_firmware | eq | 1.8.70100 |
Related
cvelist
cvelist
CVE-2018-3900
2018-10-31 00:00:00
nvd
nvd
CVE-2018-3900
2018-11-01 15:29:00
talos
talos
Yi Technology Home Camera 27US QR Code Base64 Code Execution Vulnerability
2018-10-31 00:00:00
cve
cve
CVE-2018-3900
2018-11-01 15:29:00
talosblog
talosblog
threatpost
threatpost
Yi IoT Home Camera Riddled with Code-Execution Vulnerabilities
2018-11-01 21:50:15