VULNERABILITY INTELLIGENCE
CVE-2023-53966
CVSS score9.3 CRITICAL
EPSS probability0.73%
CISA KEVNot currently listed
Published2025-12-22
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format string payloads to potentially execute arbitrary code and crash the application.
Weakness classification
- CWE-134: Use of Externally-Controlled Format String
Primary references
- disclosure@vulncheck.com — Product
- disclosure@vulncheck.com — Exploit, Third Party Advisory
- disclosure@vulncheck.com — Exploit, Third Party Advisory
- disclosure@vulncheck.com — Third Party Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Third Party Advisory