CVE-2019-16735
CRITICALPetwant PF-103 <4.22.2.42 & Petalk AI <3.2.2.30 - Buffer Overflow
Title source: llmDescription
A stack-based buffer overflow in processCommandUploadLog in libcommon.so in Petwant PF-103 firmware 4.22.2.42 and Petalk AI 3.2.2.30 allows remote attackers to cause denial of service or run arbitrary code as the root user.
References (1)
Core 1
Core References
Exploit, Third Party Advisory x_refsource_misc
https://blog.securityevaluators.com/remotely-exploiting-iot-pet-feeders-21013562aea3
Scores
CVSS v3
9.8
EPSS
0.0339
EPSS Percentile
87.4%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (2)
petwant/pf-103_firmware
4.22.2.42
skymee/petalk_ai_firmware
3.2.2.30
Published
Dec 13, 2019
Tracked Since
Feb 18, 2026