CVE-2019-15234

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2020-04-27 · updated 2026-06-17
Weakness: CWE-770

Description

SHAREit through 4.0.6.177 does not check the full message length from the received packet header (which is used to allocate memory for the next set of data). This could lead to a system denial of service due to uncontrolled memory allocation. This is different from CVE-2019-14941.

Affected products

Ushareit Shareit: through 4.0.6.177

References

https://github.com/nathunandwani/shareit-cwe-789
https://shareit.one/blog/
https://github.com/nathunandwani/shareit-cwe-789
https://shareit.one/blog/

Get alerted when CVE-2019-15234 or the next vulnerability affects your stack