Heap-based Buffer Overflow Vulnerability in uC-HTTP Could Lead to Arbitrary Code Execution

CVE-2023-45318

What is CVE-2023-45318?

A heap-based buffer overflow vulnerability exists within the HTTP Server component of Weston Embedded uC-HTTP, specifically in git commit 80d4004. This vulnerability allows attackers to craft malicious network packets that can result in arbitrary code execution on the affected system. By exploiting this flaw, an attacker can send specially designed packets, potentially compromising the security of affected applications and systems.

References