CVE-2023-33476

CRITICAL

ReadyMedia (MiniDLNA) <1.3.2 - Buffer Overflow

Title source: llm

Description

ReadyMedia (MiniDLNA) versions from 1.1.15 up to 1.3.2 is vulnerable to Buffer Overflow. The vulnerability is caused by incorrect validation logic when handling HTTP requests using chunked transport encoding. This results in other code later using attacker-controlled chunk values that exceed the length of the allocated buffer, resulting in out-of-bounds read/write.

Exploits (1)

nomisec WORKING POC 19 stars
by mellow-hype · poc
https://github.com/mellow-hype/cve-2023-33476

Scores

CVSS v3 9.8
EPSS 0.0073
EPSS Percentile 72.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-787
Status published
Products (1)
readymedia_project/readymedia 1.1.15 - 1.3.2
Published Jun 02, 2023
Tracked Since Feb 18, 2026