CVE-2023-53966
SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow
- State
- Published
- Severity
- 9.3 Critical
- Published
- Dec 22, 2025
- Updated
- Dec 22, 2025
- Reserved
- Dec 19, 2025
Description
SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format string payloads to potentially execute arbitrary code and crash the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N | VulnCheck |
| 3.1 | 9.8 Critical | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | VulnCheck |
Weaknesses
- CWE-134 Use of Externally-Controlled Format String
Affected Products
| Product | Versions |
|---|---|
SOUND4 LinkAndShare TransmitterSOUND4 Ltd. |
|
References
- ExploitDB-51259exploit
- SOUND4 Official Product Homepageproduct
- Zero Science Lab Disclosure (ZSL-2022-5744)third-party-advisory
- VulnCheck Advisory: SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflowthird-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.