Description (CNA)
NHIServiSignAdapter fails to verify the length of digital credential files’ path which leads to a heap overflow loophole. Remote attackers can use the leak to execute code without privilege.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| CHANGING Inc. / NHIServiSignAdapter | affected 1.0.20.0218 |
CWE
CWE-122
References
ADP enrichment
No English description supplied.