Skip to content
OpenAdvisories
Medium · 5.3 CVE-2019-5065 EUVD-2019-14670GHSA-gxh9-wgg7-4vx9

An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted…

Published Sep 5, 2019 · Updated Aug 4, 2024 · Assigned by talos

Description

An exploitable information disclosure vulnerability exists in the packet-parsing functionality of Blynk-Library v0.6.1. A specially crafted packet can cause an unterminated strncpy, resulting in information disclosure. An attacker can send a packet to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
— Blynck Inc Blynk Blynk-Library v0.6.1 —

References