https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 09:27:05 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2025-34449 <p>Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.</p> <p>Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2025-34449 https://vulnerability.circl.lu/vuln/ghsa-wvmf-999m-w27j <p>Genymobile/scrcpy versions up to and including 3.3.3 and prior to commit 3e40b24 contain a global buffer overflow vulnerability in the function sc_read32be, invoked via sc_device_msg_deserialize() and process_msgs(). Processing crafted device messages can cause reads beyond the bounds of a global buffer, leading to memory corruption or crashes. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.</p> <p>Genymobile/scrcpy versions up to and including 3.3.3 and prior to commit 3e40b24 contain a global buffer overflow vulnerability in the function sc_read32be, invoked via sc_device_msg_deserialize() and process_msgs(). Processing crafted device messages can cause reads beyond the bounds of a global buffer, leading to memory corruption or crashes. This vulnerability can be exploited to cause a denial of service and, under certain conditions, may be leveraged for further exploitation depending on the execution environment and available mitigations.</p> https://vulnerability.circl.lu/vuln/ghsa-wvmf-999m-w27j https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-34449 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: scrcpy, Ubuntu:22.04:LTS: scrcpy, Ubuntu:24.04:LTS: scrcpy, Ubuntu:25.10: scrcpy, Ubuntu:26.04:LTS: scrcpy</p> <p>Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: scrcpy, Ubuntu:22.04:LTS: scrcpy, Ubuntu:24.04:LTS: scrcpy, Ubuntu:25.10: scrcpy, Ubuntu:26.04:LTS: scrcpy</p> <p>Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.</p> https://vulnerability.circl.lu/vuln/ubuntu-cve-2025-34449