Realtek RTL819x Jungle SDK Buffer Overflow Vulnerabilities

CVE-2023-50239

What is CVE-2023-50239?

Two vulnerabilities characterized as stack-based buffer overflows affect the boa set_RadvdInterfaceParam functionality in Realtek's RTL819X Jungle SDK v3.4.11. An attacker can exploit these vulnerabilities by sending a carefully crafted series of network requests, which may result in remote code execution. The vulnerabilities are triggered by the interfacename parameter in the request, making it crucial for users of the affected SDK to implement mitigations and monitor network traffic for exploit attempts.

References