CVE-2018-3900: Buffer Overflow

Published Nov 1, 2018

Updated

An exploitable code execution vulnerability exists in the QR code scanning functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted QR Code can cause a buffer overflow, resulting in code execution. An attacker can make the camera scan a QR code to trigger this vulnerability. Alternatively, a user could be convinced to display a QR code from the internet to their camera, which could exploit this vulnerability.

Affected Software

3 affected components

Yitechnology Yi Home Camera Firmware=1.8.7.0d

Yitechnology Yi Home Camera

Yitechnology Yi Home

Event History

Nov 1, 2018

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2018-3900?

CVE-2018-3900 has a high severity rating due to its potential for remote code execution.

How do I fix CVE-2018-3900?

To fix CVE-2018-3900, upgrade the Yi Home Camera firmware to a version that is not affected by this vulnerability.

What devices are affected by CVE-2018-3900?

CVE-2018-3900 specifically affects the Yi Home Camera running firmware version 1.8.7.0D.

Can CVE-2018-3900 be exploited remotely?

Yes, CVE-2018-3900 can be exploited remotely through a specially crafted QR code.

What is the impact of CVE-2018-3900?

The impact of CVE-2018-3900 includes unauthorized code execution on the affected camera.