WireGuard-Linux Stack-Based Buffer Overflow in lsiio (Linux IIO Userspace Tool) Due to Unbounded fscanf

Posted by Ron E on Sep 03*Description:* A stack-based buffer overflow exists in the Linux Industrial I/O (IIO) userspace utility lsiio. The vulnerability occurs in the find_type_by_name() function, where the program reads an unbounded string from a filesystem-backed attribute into a fixed-size stack buffer using fscanf("%s", ...). If a crafted or...