CVE-2019-5034

An exploitable information disclosure vulnerability exists in the Weave Legacy Pairing functionality of Nest Cam IQ Indoor version 4620002. A set of specially crafted weave packets can cause an out of bounds read, resulting in information disclosure. An attacker can send packets to trigger this...

CVE-2019-5034

CVE-2019-5034 affects Nest Cam IQ Indoor (firmware version 4620002) in the Weave Legacy Pairing functionality. Cisco Talos reports an exploitable information disclosure: a crafted Weave packet can trigger an out-of-bounds read, leaking memory contents. The vulnerability stems from a lack of bound...