Genymobile/scrcpy <= 3.3.3 Global Buffer Overflow

Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.

N/A

可信数据的反序列化

scrcpy 缓冲区错误漏洞

scrcpy是Genymobile开源的一个Android设备控制软件。 scrcpy 3.3.3及之前版本和3e40b24之前版本存在缓冲区错误漏洞，该漏洞源于sc_read32be函数存在全局缓冲区溢出，可能导致内存损坏或崩溃。

N/A

N/A