medium5.3
CVE-2019-5065
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1.
Impact
An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Blynk | Blynk-Library | Version 0.6.1 |