CVE-2025-9001
LemonOS HTTP Client main.cpp HTTPGet stack-based overflow
Résumé
LemonOS HTTP Client main.cpp HTTPGet stack-based overflow
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A vulnerability was determined in LemonOS up to nightly-2024-07-12 on LemonOS. Affected by this issue is the function HTTPGet of the file /Applications/Steal/main.cpp of the component HTTP Client. The manipulation of the argument chunkSize leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report vuldb.com
- web hkohi.ca