CVE-2022-32292

Name of the Vulnerable Software and Affected Versions ConnMan versions 1.41 and earlier

Description The issue is related to a heap-based buffer overflow in the received data component of the gweb module in ConnMan. This can be exploited by remote attackers who can send HTTP requests to the gweb component, potentially allowing them to execute arbitrary code. The vulnerability is associated with a buffer overflow, which can lead to code execution.

Recommendations For ConnMan versions 1.41 and earlier, consider disabling the gweb component or restricting access to it until a patch is available. As a temporary workaround, avoid using the received data component in the gweb module to minimize the risk of exploitation.