Unscored CVE-2020-7248 EUVD-2020-28375GHSA-g6fq-pqgw-hfmj

libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack …

Published Mar 16, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

libubox in OpenWrt before 18.06.7 and 19.x before 19.07.1 has a tagged binary data JSON serialization vulnerability that may cause a stack based buffer overflow.

References

https://github.com/openwrt/openwrt/commits/master
https://openwrt.org/advisory/2020-01-31-2
https://nvd.nist.gov/vuln/detail/CVE-2020-7248#range-4512438