writeups.xyz / chonked pt.1: minidlna 1.3.2 http chunk parsing heap overflow (cve-2023-33476) root cause analysis

Submitter : c2a

Date: 19 June 2023

Bounty : undisclosed

Vulnerabilities :

• Memory Corruption
• Heap Overflow
• Buffer Overflow
• RCE

Programs :

• MiniDLNA

Authors :

• Hyper (@Hyprdude)

Link :
https://blog.coffinsec.com/0day/2023/05/31/minidlna-heap-overflow-rca.html