2 matches found
CVE-2019-6498
CVE-2019-6498 affects GattLib 0.2 due to a stack-based buffer over-read in gattlib_connect (file dbus/gattlib.c ) caused by misuse of strncpy . Public sources (NVD entry) list CVSSv3 base score 8.8 (HIGH) with attack vector Adjacent and high impacts on confidentiality, integrity, and availability...
CVE-2021-33590
GattLib 0.3-rc1 is affected by a stack-based buffer over-read in get_device_path_from_mac (dbus/gattlib.c). This is reported across multiple sources (e.g., Red Hat CVE entry, NVD/CVE entry). The connected documents confirm the vulnerable function and file path but do not provide concrete exploit ...