Critical · 9.8 CVE-2024-23978 EUVD-2024-21404GHSA-9mhj-hrp8-v2xc

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be ex…

Published Feb 2, 2024 · Updated May 15, 2025 · Assigned by jpcert

Description

Heap-based buffer overflow vulnerability exists in HOME SPOT CUBE2 V102 and earlier. By processing invalid values, arbitrary code may be executed. Note that the affected products are no longer supported.

Affected products

Vendor	Product	Affected	Fixed
KDDI	HOME SPOT CUBE2	V102 and earlier	—

References

https://www.au.com/support/service/mobile/guide/wlan/home_spot_cube_2/
https://jvn.jp/en/vu/JVNVU93740658/