CVE-2021-21950

An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function recv_server_device_response_msg_process. A specially-crafted network packet can lead to code execution.
References
Link Resource
https://talosintelligence.com/vulnerability_reports/TALOS-2021-1378 Exploit Third Party Advisory
Configurations

Configuration 1


Information

Published : 2021-12-08 10:15

Updated : 2022-07-29 03:04


NVD link : CVE-2021-21950

Mitre link : CVE-2021-21950

Products Affected
No products.
CWE
CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer