Description
Stack-based buffer overflow in medialib.dll in BaoFeng Storm 3.9.62 allows remote attackers to execute arbitrary code via a long pathname in the source attribute of an item element in a .smpl playlist file.
Exploits (1)
References (4)
Core 4
Core References
Exploit mailing-list
x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=124624413120440&w=2
Exploit vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/35512
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/35592
Exploit mailing-list
x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=124627617220913&w=2
Scores
EPSS
0.0713
EPSS Percentile
91.6%
Details
CWE
CWE-119
Status
published
Products (1)
baofeng/storm
3.9.62
Published
Jul 27, 2009
Tracked Since
Feb 18, 2026