Cloud Iot Device Sdk For Embedded C
Monthly
In IoT Devices SDK, there is an implementation of calloc() that doesn't have a length check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.
In IoT Devices SDK, there is an implementation of calloc() that doesn't have a length check. Rated high severity (CVSS 7.8), this vulnerability is low attack complexity. This Buffer Copy without Size Check vulnerability could allow attackers to overflow a buffer to corrupt adjacent memory.