Description
Many API function codes receive raw pointers remotely from the user and trust these pointers as valid in-bound memory regions. An attacker can manipulate API functions by writing arbitrary data into the resolved address of a raw pointer.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| AUVESY | Versiondog | All – ≤ 8.0 | — |
Advisories 1
- ICSA-21-292-01 AUVESY Versiondog CISA ICS & IT advisories · Oct 19, 2021