Description
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Arris | VIP1113 | ≤ 2025-05-30 | — |
Medium · 6.7
CVE-2025-49163
EUVD-2025-16692GHSA-3hgv-99j2-fhvj
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file.
Published Jun 2, 2025 · Updated Jun 3, 2025 · Assigned by mitre