UAF in XMEye Security Camera

Full Disclosure reports a use-after-free in the Sofia binary used by XMEye security cameras.

A Full Disclosure post describes a use-after-free in Sofia, an ARM binary used by XMEye security cameras. The binary lacks PIE and RELRO, has an executable stack and RWX segments, and uses Hikvision's proprietary WFS flash filesystem. The posted excerpt does not include a CVE or evidence of in-the-wild exploitation.

• Use-after-free reported in the XMEye camera binary Sofia.
• ARM32 build has no PIE or RELRO and includes RWX segments.
• Sofia uses Hikvision's proprietary WFS flash filesystem.
• No CVE or active exploitation is stated.