Skip to content
OpenAdvisories
Medium · 4.8 CVE-2021-40526 EUVD-2021-27701GHSA-jvqh-h8m5-xc3q

Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial…

Published Oct 25, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Incorrect calculation of buffer size vulnerability in Peleton TTR01 up to and including PTV55G allows a remote attacker to trigger a Denial of Service attack through the GymKit daemon process by exploiting a heap overflow in the network server handling the Apple GymKit communication. This can lead to an Apple MFI device not being able to authenticate with the Peleton Bike

References