cve/2024/CVE-2024-41593.md
2025-09-29 21:09:30 +02:00

766 B

CVE-2024-41593

Description

DrayTek Vigor310 devices through 4.3.2.6 allow a remote attacker to execute arbitrary code via the function ft_payload_dns(), because a byte sign-extension operation occurs for the length argument of a _memcpy call, leading to a heap-based Buffer Overflow.

POC

Reference

Github