mirror/OpenRGB
1
0 Fork 0
mirror of https://github.com/CalcProgrammer1/OpenRGB.git synced 2026-09-14 22:27:56 -04:00
Code Issues Packages Projects Releases Wiki Activity

Address security issues in release_candidate_1.0rc3

Browse Source 
- CVE-2026-59682: OpenRGB: arbitrary file overwrite and deletion local and remote
- CVE-2026-59683: OpenRGB: local and remote system compromise via arbitrary file write using attacker controlled strings
- CVE-2026-18794: OpenRGB: insufficient input data checks lead to Denial-of-Service, memory overread and overwrite
This commit is contained in:
Adam Honse committed 2026-08-13 00:59:02 -05:00
1 parent 6fbcf62d76
commit d2dd9dcc73
7 files changed
+61 -7
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

NetworkClient.cpp
+5 -1
View File
@@ -515,7 +515,11 @@ void NetworkClient::ListenThreadFunction()
/*---------------------------------------------------------*\
| Header received, now receive the data |
\*---------------------------------------------------------*/
if(header.pkt_size > 0)
if(header.pkt_size > OPENRGB_SDK_MAX_PACKET_SIZE)
{
goto listen_done;
}
else if(header.pkt_size > 0)
{
bytes_read = 0;