high7.5
CVE-2018-3935
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D.
Impact
An exploitable code execution vulnerability exists in the UDP network functionality of Yi Home Camera 27US 1.8.7.0D. A specially crafted set of UDP packets can allocate unlimited memory, resulting in denial of service. An attacker can send a set of packets to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Yitechnology | Yi Home Camera Firmware | Version 1.8.7.0d |
| Yitechnology | Yi Home | All versions |