CVE-2025-70085

An issue was discovered in OpenSatKit 2.2.1. The EventErrStr buffer has a fixed size of 256 bytes. The code uses sprintf to format two filenames Source1Filename and the string returned by FileUtilFileStateStr into this buffer without any length checking and without using bounded format specifiers...

CVE-2025-70085

OpenSatKit version 2.2.1 is vulnerable to a stack buffer overflow due to the use of unsafe sprintf calls in file.c. The application fails to perform length checks or use bounded format specifiers when formatting two filenames into the fixed-size 256-byte EventErrStr buffer. Specifically, the func...