CVE-2021-36762

CVE-2021-36762 affects HCC Embedded InterNiche NicheStack and NicheLite up to version 4.3. The tfshnd():tftpsrv.c TFTP packet processing function may read beyond the protocol buffer when a filename isn’t properly NULL-terminated, enabling out-of-bounds reads and potential DoS. Impact is described...

CVE-2021-36762: Undefined Security Weakness

An issue was discovered in HCC Embedded InterNiche NicheStack through 4.3. The tfshnd:tftpsrv.c TFTP packet processing function doesn't ensure that a filename is adequately '\0' terminated; therefore, a subsequent call to strlen for the filename might read out of bounds of the protocol packet...