Severity by source
Network-facing receiver (AV:N inferred from 'NetRx'), no auth implied by message-parsing path, read-only impact on confidentiality and availability, no integrity or scope change.
Estimated by vuln.today — no official severity rating has been published for this CVE yet.
Lifecycle Timeline
1DescriptionCVE.org
[GHSA-mh75-5pr3-qv2p: NetRx: out-of-bounds read via unvalidated MsgAudio length]
AnalysisAI
Out-of-bounds read in NetRx's audio message handling exposes memory contents and may cause service disruption when processing crafted MsgAudio payloads with unvalidated length fields. The affected component fails to validate the length field of incoming MsgAudio messages before using it to index or copy memory, a classic CWE-125-class flaw. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | The NetRx component must be running and reachable by the attacker - either directly over the network (if it accepts remote audio messages) or locally (if it processes inter-process audio messages). … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | Formal risk signals are almost entirely absent for this CVE: no CVSS score or vector, no CWE assignment, no EPSS probability, no KEV listing, no POC or exploit code reported, and no patch version confirmed. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker sends a crafted network message with a malformed or oversized MsgAudio length field to the NetRx listener. The component reads beyond the intended buffer boundary, either leaking adjacent memory contents (potentially exposing sensitive data such as keys or session tokens) or causing a null-dereference or segmentation fault that crashes the service. … |
| Remediation | No vendor-released patch or specific fix version has been identified at time of analysis. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same technique Buffer Overflow
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today