CVE-2019-5065

Blynk-Library v0.6.1 contains an information-disclosure vulnerability in the packet-parsing path (BlynkProtocol::processInput). Specifically, in the BLYNK_CMD_REDIRECT handling, the code allocates 32 bytes for redir_serv and copies exactly 32 bytes via strncpy, which can result in a non-null-term...

CVE-2022-29496

Summary: CVE-2022-29496 is a stack-based buffer overflow in Blynk-Library v1.0.1, specifically in the BlynkConsole.h runCommand function. The issue arises because split_argv can overflow the stack when parsing commands with more than seven spaces, allowing an attacker to overwrite the return addr...