Global
NovaStar CX40 LED controller overflow and injection flaws (CVE-2025-3007, CVE-2025-3008)
NovaStar CX40 4K LED controllers at version 2.44.0 and earlier have a stack-based overflow in the NetFilter Utility's netconfig handling (CVE-2025-3007, rated critical). The same utility has a command injection flaw (CVE-2025-3008). Neither had public proof-of-concept code when the database entries were captured.
- Type
- Vulnerability
- Sector
- Other
- Country
- Global
Sources
- CVE-2025-3007 · NIST NVD
- CVE-2025-3008 · NIST NVD