Numeric Truncation Error Affecting microsoft.azure.kinect.sensor package, versions [0,]


Severity

Recommended
0.0
medium
0
10

CVSS assessment made by Snyk's Security Team

    Threat Intelligence

    EPSS
    0.05% (22nd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications
  • Snyk ID SNYK-DOTNET-MICROSOFTAZUREKINECTSENSOR-7444636
  • published 12 Jul 2024
  • disclosed 9 Jul 2024
  • credit VictorV

How to fix?

Upgrade Microsoft.Azure.Kinect.Sensor to version or higher.

Overview

Affected versions of this package are vulnerable to Numeric Truncation Error through the handling of specially crafted inputs. An attacker can execute arbitrary code on the target system by sending a malformed data packet.

References

CVSS Scores

version 4.0
version 3.1
Expand this section

Snyk

Recommended
5.4 medium
  • Attack Vector (AV)
    Physical
  • Attack Complexity (AC)
    High
  • Attack Requirements (AT)
    None
  • Privileges Required (PR)
    None
  • User Interaction (UI)
    None
  • Confidentiality (VC)
    High
  • Integrity (VI)
    High
  • Availability (VA)
    High
  • Confidentiality (SC)
    None
  • Integrity (SI)
    None
  • Availability (SA)
    None