CVE-2023-53966

CRITICAL9.8

SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow

Published Dec 22, 2025

Modified 2 months ago

Details

SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format string payloads to potentially execute arbitrary code and crash the application.

References

WEB

https://web.archive.org/web/20221207074555/https://www.sound4.com/

ADVISORY

https://www.cve.org/CVERecord?id=CVE-2023-53966

DETECTION

https://www.exploit-db.com/exploits/51259

ADVISORY

https://www.vulncheck.com/advisories/sound-linkandshare-transmitter-format-string-stack-buffer-overflow

DETECTION

https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5744.php

CVSS Analysis