Buffer overflow due to use of `strcpy` in `performRtspHandshake`

CVE-2023-42800

What is CVE-2023-42800?

The Moonlight-common-c library, essential to the functionality of Moonlight clients, is susceptible to a buffer overflow vulnerability due to the unprotected use of unsafe C functions and inadequate bounds checking. An attacker can potentially exploit this flaw via a malicious game streaming server, leading to client crashes or even remote code execution if security mitigations are weak or bypassed. This issue was recognized and rectified in a later commit.

References