CVE-2024-21778

Name of the Vulnerable Software and Affected Versions Realtek rtl819x Jungle SDK version 3.4.11

Description A heap-based buffer overflow vulnerability exists in the configuration file mib init value array functionality. A specially crafted .dat file can lead to arbitrary code execution. An attacker can upload a malicious file to trigger this vulnerability.

Recommendations For Realtek rtl819x Jungle SDK version 3.4.11, consider restricting access to the configuration file mib init value array functionality to minimize the risk of exploitation. Avoid uploading unverified .dat files until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.