NetSight
high8.8Public exploit code

CVE-2019-6498

GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c because strncpy is misused.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

GattLib 0.2 has a stack-based buffer over-read in gattlib_connect in dbus/gattlib.c because strncpy is misused.

Affected products

VendorProductAffected versions
LabapartGattlib
Version 0.2

Weakness classification

References