CVE-2024-53320 Details

A vulnerability exists in the Qualisys C++ SDK, specifically in commit a32a21a, where multiple stack buffer overflows have been introduced. This issue arises in the GetCurrentFrame, SaveCapture, and LoadProject functions, all of which utilize fixed-size stack buffers ranging from 100 to 256 bytes. The vulnerability is exploited through unsafe string operations that allow for the overflow of these buffers, potentially leading to stack corruption, code execution, information disclosure, and crashes causing a denial-of-service condition.

It is recommended to replace fixed-size buffers with dynamically allocated ones. For example, using std::string for C++ strings or std::vector<char> for C-style strings can effectively mitigate the risk of buffer overflows.