UAF in XMEye Security Camera
Full Disclosure reports a use-after-free in the Sofia binary used by XMEye security cameras.
A Full Disclosure post describes a use-after-free in Sofia, an ARM binary used by XMEye security cameras. The binary lacks PIE and RELRO, has an executable stack and RWX segments, and uses Hikvision's proprietary WFS flash filesystem. The posted excerpt does not include a CVE or evidence of in-the-wild exploitation.
- Use-after-free reported in the XMEye camera binary Sofia.
- ARM32 build has no PIE or RELRO and includes RWX segments.
- Sofia uses Hikvision's proprietary WFS flash filesystem.
- No CVE or active exploitation is stated.
- Vendors
- XMEye
- Products
- SofiaXMEye Security Camera
From the original article
Posted by evan on Sep 22 checksec: $ checksec --file Sofia [*] '/redacted/Sofia' Arch: arm-32-little RELRO: No RELRO Stack: Canary found NX: NX unknown - GNU_STACK missing PIE: No PIE (0x8000) Stack: Executable RWX: Has RWX segments this ones interesting. sofia uses an internal flash fs called WFS. per an online search: WFS is a proprietary filesystem developed by Hikvision for its...
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.