CVE-2023-35056

CVE-2023-35056 affects Yifan YF325 v1.0_20221108. The vulnerability is a stack-based buffer overflow in the httpd cgi_handler path, triggered by the next_page parameter fetched from the HTTP request and copied into a fixed-size buffer via strcpy, enabling potential remote code execution. Talos de...

Yifan YF325 httpd next_page buffer overflow vulnerability

Talos Vulnerability Report TALOS-2023-1761 Yifan YF325 httpd nextpage buffer overflow vulnerability October 11, 2023 CVE Number CVE-2023-35055,CVE-2023-35056 SUMMARY A buffer overflow vulnerability exists in the httpd nextpage functionality of Yifan YF325 v1.020221108. A specially crafted network...