CVE-2024-6246

Summary

CVE-2024-6246 is a heap-based buffer overflow vulnerability affecting Wyze Cam v3 IP cameras. This issue lies in the Realtek Wi-Fi kernel module, where user-supplied data lacks proper validation prior to copying to a heap-buffer. Consequently, network-adjacent attackers can exploit this flaw to execute arbitrary code in the kernel context without requiring authentication. This vulnerability, identified as ZDI-CAN-22310, poses a significant risk to affected Wyze Cam v3 installations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.