This vulnerability in GALAYOU Y4 1.0.0 is a buffer overflow in an unspecified Web Server function. The attack vector is local network access, requiring no privileges or user interaction. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high impact on confidentiality, integrity, and availability. The vendor was notified but has not issued any fix or advisory. Exploit code is publicly available, increasing the risk of exploitation despite no known active exploitation in the wild.

Successful exploitation can lead to a buffer overflow condition, potentially allowing an attacker on the local network to compromise the affected system's confidentiality, integrity, and availability. The vulnerability does not require privileges or user interaction, making it easier to exploit within the local network environment. However, remote exploitation from outside the local network is not possible according to the data.

No official patch or remediation is currently available from the vendor. Since the vulnerability requires local network access, restricting network access to trusted users and isolating the device from untrusted local networks can reduce exposure. Monitor for any future vendor advisories or patches and apply them promptly once available. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.