Threats tagged 'ghsa-qh3x-7q6p-6x7f'

Autel Maxi Charger Single firmware up to version 1.03.51 contains a heap-based buffer overflow vulnerability in the set_ap_param command handled by the /localcfg endpoint. This flaw allows an authenticated attacker to supply oversized input, potentially causing denial of service or arbitrary code execution. The vulnerability has a high CVSS score of 8.8, indicating critical severity. No patch or remediation information is currently available.