What’s Vulnerable › Vulnerabilities

CVE-2023-6322: Stack-based buffer overflow in message parser functionality

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2024-05-15 · updated 2026-06-17
• Weakness: CWE-121

Description

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A specially crafted message can lead to stack-based buffer overflow. An attacker can make authenticated requests to trigger this vulnerability.

Affected products

• Roku Indoor Camera Se Firmware: 3.0.2.4679
• ThroughTek Kalay Platform: all versions
• Wyze Cam v3: 4.36.11.5859

References

• https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/
• https://bitdefender.com/blog/labs/notes-on-throughtek-kalay-vulnerabilities-and-their-impact/

Get alerted when CVE-2023-6322 or the next vulnerability affects your stack