What’s Vulnerable › Vulnerabilities

CVE-2023-53966: SOUND4 LinkAndShare Transmitter 1.1.2 Format String Stack Buffer Overflow

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2025-12-22 · updated 2026-06-17
• Weakness: CWE-134

Description

SOUND4 LinkAndShare Transmitter 1.1.2 contains a format string vulnerability that allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Attackers can manipulate the username environment variable with format string payloads to potentially execute arbitrary code and crash the application.

Affected products

• SOUND4 Ltd. SOUND4 LinkAndShare Transmitter: 1.1.2

References

• https://web.archive.org/web/20221207074555/https://www.sound4.com/
• https://www.exploit-db.com/exploits/51259
• https://www.vulncheck.com/advisories/sound-linkandshare-transmitter-format-string-stack-buffer-overflow
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5744.php
• https://www.zeroscience.mk/en/vulnerabilities/ZSL-2023-5744.php

Get alerted when CVE-2023-53966 or the next vulnerability affects your stack