This vulnerability involves a stack-based buffer overflow triggered by manipulating the Authorization argument in the Header Handler component of Ritlabs TinyWeb Server (up to version 1.94) on Win32 platforms. The affected code resides in the libeay32.dll.html library. The flaw allows remote attackers to cause a buffer overflow, potentially leading to arbitrary code execution or denial of service. The vulnerability has been publicly disclosed, but the vendor has not provided any response or patch. No known exploits are reported in the wild at this time.

Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on the affected server due to the stack-based buffer overflow. Since the attack vector is remote and requires no privileges or user interaction, the risk is significant. However, the CVSS score of 6.9 reflects a medium severity level, considering the complexity and impact factors.

No official patch or remediation is currently available from the vendor, and the vendor has not responded to the disclosure. Users should monitor the vendor's communications for any future updates. In the meantime, restricting access to the affected service and employing network-level protections to limit exposure to untrusted networks may reduce risk. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance.