Skip to content
OpenAdvisories
High · 7.5 CVE-2019-5037 EUVD-2019-14644GHSA-9v2w-wx2p-2q5v

An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version …

Published Aug 20, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable denial-of-service vulnerability exists in the Weave certificate loading functionality of Nest Cam IQ Indoor camera, version 4620002. A specially crafted weave packet can cause an integer overflow and an out-of-bounds read on unmapped memory to occur, resulting in a denial of service. An attacker can send a specially crafted packet to trigger.

Affected products

VendorProductAffectedFixed
— Nest Labs Nest Labs Nest Cam IQ Indoor version 4620002 —

References