Faruk Kazi

A flaw in the H.266 parser occurs when processing a malformed H.266/VVC video stream containing a crafted aspect ratio indicator value. This leads to an out-of-bounds read of up to 8 bytes from adjacent memory. An attacker can use a malicious H.266 video file or stream to leak limited memory contents through video metadata, which may expose sensitive information from the application's address space.

The issue is related to a Signal Handler Race Condition that allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition in Ethernet communication. This is achieved by sending a large number of specially crafted packets to any UDP port when the GC-ENET-COM is configured as a Modbus TCP Server. The communication resumes only when the power of the main unit is turned off and on or when the GC-ENET-COM is hot-swapped from the main unit.