CVE-2021-21969

An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at 4 the jsonobjectgetstring to populate the ppayload global variable. The ppayload is only 0x100 bytes long, a...