Vulnerability Spotlight: Vulnerabilities in popular library affect Unix-based devices
Summary: Cisco Talos discovered a memory corruption vulnerability, tracked as TALOS-2022-1517 (CVE-2022-29503 and CVE-2022-29504), in the uClibC and uClibC-ng libraries that can occur if a malicious user repeatedly creates threads. Talos confirmed the Anker Eufy Homebase 2, version 2.1.8.8h, is affected, along with uClibC version 0.9.33.2 and uClibC-ng version 1.0.40; Anker has patched the issue, but uClibC has not issued an official fix.
What you should know: uClibC is a lightweight library used in many embedded devices, and the upstream project has shipped no official fix, so every unpatched device running it carries the flaw until its vendor acts on its own.
Read the original at Cisco Talos ↗
- Topics
- Cloud Security
- Mentions
- CVE-2022-29503CVE-2022-29504
- Related
- Google Cloud Warns Three AMD Turin CPU Flaws Could Leak Data Across Processes in VMs Cyber Risks · Nov 12, 2026New Falcon Cloud Security Innovations Secure the Cloud AI Runs On Cyber Risks · Nov 04, 2026