Buffer overflow due to use of `strcpy` in `parseUrlAddrFromRtspUrlString`

CVE-2023-42799

What is CVE-2023-42799?

The Moonlight-common-c library, utilized within the GameStream client architecture, is susceptible to a buffer overflow vulnerability. This arises from improper bounds checking and the usage of unsafe C functions. A malicious actor controlling a game streaming server could leverage this vulnerability to manipulate clients, potentially leading to undesirable client crashes or remote code execution if security mitigations are circumvented. The flaw has been addressed in a subsequent commit, reinforcing the importance of updating affected versions.

References