CVE-2025-41732 — Stack-based buffer overflow via unsafe sscanf in check_cookie()
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full dev…
Published: 2025-12-10 · CVSS: 9.8 · CVSS 3.1
An unauthenticated remote attacker can abuse unsafe sscanf calls within the check_cookie() function to write arbitrary data into fixed-size stack buffers which leads to full device compromise.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7