Vulnerabilities > Bfgminer > Bfgminer > 4.0.0

DATE CVE VULNERABILITY TITLE RISK
2014-07-23 CVE-2014-4502 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Multiple heap-based buffer overflows in the parse_notify function in sgminer before 4.2.2, cgminer before 4.3.5, and BFGMiner before 4.1.0 allow remote pool servers to have unspecified impact via a (1) large or (2) negative value in the Extranonc2_size parameter in a mining.subscribe response and a crafted mining.notify request.
network
low complexity
bfgminer sgminer-project CWE-119
critical
 10.0
10