CVE-2021-21941

A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to remote code execution...

CVE-2021-21941

The CVE-2021-21941 vulnerability affects Anker Eufy Homebase 2 (version 2.1.6.9h) where the pushMuxer CreatePushThread function creates two threads sharing the same zx_push_stream_ctx structure. A race with receive_push_thread can cause the shared zx_push_stream_ctx to be freed while other thread...