CVE-2023-53966

Katalog CVE

CVSS 9.8 · Critical EPSS 0,73%

Kerentanan Use of Externally-Controlled Format String pada sound4 linkandshare transmitter. Skor CVSS 3.1 9.8 (Critical) menurut vulncheck.com.

Deskripsi (NVD)

SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format string payloads to potentially execute arbitrary code and crash the application.

Rincian

Terbit di NVD

22 Desember 2025

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

9.8 (Critical), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-134: Use of Externally-Controlled Format String

EPSS (30 hari)

0,73% peluang dieksploitasi; lebih tinggi dari 53,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.exploit-db.com/exploits/51259 exploit · advisory pihak ketiga
• https://www.vulncheck.com/advisories/sound-linkandshare-transmitter-format-string-stack-buffer-overflow exploit · advisory pihak ketiga
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5744.php advisory pihak ketiga
• https://web.archive.org/web/20221207074555/https://www.sound4.com/ product