Vulnerability · Published Mar 5, 2024 · Assigned by Nozomi
CVE-2023-45591
High 7.5
In plain English
A high-severity heap buffer overflow in imx6 bundle from AiLux. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).
Official description
A CWE-122 “Heap-based Buffer Overflow” vulnerability in the “logger_generic” function of the “Ax_rtu” binary allows a remote authenticated attacker to trigger a memory corruption in the context of the binary. This may result in a Denial-of-Service (DoS) condition, possibly in the execution of arbitrary code with the same privileges of the process (root), or have other unspecified impacts on the device. This issue affects: AiLux imx6 bundle below version imx6_1.0.7-2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| AiLux | imx6 bundle | 0 – before 1.0.7-2 |
Weakness: CWE-122 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H