CVE-2021-21970

An out-of-bounds write vulnerability exists in the HandleSeaCloudMessage functionality of Sealevel Systems, Inc. SeaConnect 370W v1.3.34. The HandleIncomingSeaCloudMessage function uses at 3 the jsonobjectgetstring to populate the pname global variable. The pname is only 0x80 bytes long, and the...