This vulnerability involves a buffer overflow in an unknown function of the Web Server component in GALAYOU Y4 version 1.0.0. The flaw allows an attacker with local network access to manipulate the component to cause a buffer overflow condition. The vulnerability has a CVSS 4.0 base score of 8.7, indicating high severity with network attack vector limited to local access, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. The vendor was contacted but did not provide any response or patch, and no official remediation is available at this time.

Successful exploitation of this buffer overflow vulnerability could lead to significant compromise of the affected system's confidentiality, integrity, and availability. Since the attack requires local network access, remote exploitation is not possible without prior network access. The public disclosure increases the risk of exploitation, although no known exploits in the wild have been reported.

No official fix or patch is currently available from the vendor. Since the vulnerability requires local network access, restricting network access to trusted users and devices may reduce exposure. Monitor for any updates from the vendor regarding patches or mitigations. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.