Vulnerabilities > Openweave

DATE CVE VULNERABILITY TITLE RISK
2019-08-20 CVE-2019-5040 Integer Overflow or Wraparound vulnerability in multiple products
An exploitable information disclosure vulnerability exists in the Weave MessageLayer parsing of Openweave-core version 4.0.2 and Nest Cam IQ Indoor version 4620002.
network
low complexity
openweave google CWE-190
7.5
7.5
2019-08-20 CVE-2019-5039 Out-of-bounds Write vulnerability in Openweave Openweave-Core 4.0.2
An exploitable command execution vulnerability exists in the ASN1 certificate writing functionality of Openweave-core version 4.0.2.
network
low complexity
openweave CWE-787
8.8
8.8
2019-08-20 CVE-2019-5038 Out-of-bounds Write vulnerability in Openweave Openweave-Core 4.0.2
An exploitable command execution vulnerability exists in the print-tlv command of Weave tool.
network
low complexity
openweave CWE-787
8.8
8.8