CVE-2019-14941

HIGH

Shareit < 4.0.6.177 - Resource Allocation Without Limits

Title source: rule
STIX 2.1

Description

SHAREit through 4.0.6.177 does not check the body length from the received packet header (which is used to allocate memory for the next set of data). This could lead to a system denial of service due to uncontrolled memory allocation.

References (2)

Core 2
Core References
Vendor Advisory x_refsource_misc
https://shareit.one/blog/

Scores

CVSS v3 7.5
EPSS 0.0037
EPSS Percentile 58.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Details

CWE
CWE-770
Status published
Products (1)
ushareit/shareit < 4.0.6.177
Published Apr 27, 2020
Tracked Since Feb 18, 2026