CVE-2017-2884

Name of the Vulnerable Software and Affected Versions Circle with Disney version 2.0.1

Description A vulnerability exists in the user photo update functionality, allowing a repeated set of specially crafted API calls to corrupt essential memory and result in a bricked device. An attacker needs network connectivity to the device to trigger this issue.

Recommendations For Circle with Disney version 2.0.1, as a temporary workaround, consider restricting network connectivity to the device until a patch is available. Avoid using the user photo update functionality until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.