CVE-2019-5040

Name of the Vulnerable Software and Affected Versions Openweave-core version 4.0.2 Nest Cam IQ Indoor version 4620002

Description An information disclosure issue exists due to integer overflow in Weave MessageLayer parsing. A specially crafted weave packet can cause PacketBuffer data reuse. This can be triggered by an attacker sending a packet.

Recommendations For Openweave-core version 4.0.2, update to a version that fixes the integer overflow issue in Weave MessageLayer parsing. For Nest Cam IQ Indoor version 4620002, update to a version that fixes the integer overflow issue in Weave MessageLayer parsing.