CVE-2018-3899: Buffer Overflow
An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. The transinfo call can overwrite a buffer of size 0x104, which is more than enough to overflow the return address from the passworddst field
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-3899?
CVE-2018-3899 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2018-3899?
To mitigate CVE-2018-3899, users should update the Yi Home camera firmware to the latest version provided by the manufacturer.
What types of attacks can exploit CVE-2018-3899?
CVE-2018-3899 can be exploited through specially crafted QR codes that trigger a buffer overflow.
Which devices are affected by CVE-2018-3899?
CVE-2018-3899 affects the Yi Home Camera running firmware version 1.8.7.0D.
What is the impact of CVE-2018-3899 on the Yi Home Camera?
The impact of CVE-2018-3899 includes the possibility of unauthorized code execution, which could compromise the camera's security.