CVE-2021-21940

Name of the Vulnerable Software and Affected Versions Anker Eufy Homebase 2 version 2.1.6.9h

Description A heap-based buffer overflow issue exists in the pushMuxer processRtspInfo functionality. This can be triggered by a specially-crafted network packet, leading to a heap buffer overflow. An attacker can exploit this by sending a malicious packet.

Recommendations For Anker Eufy Homebase 2 version 2.1.6.9h, consider disabling the pushMuxer processRtspInfo functionality as a temporary workaround until a patch is available. Restrict access to the network to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.