CVE-2024-53320

CVE-2024-53320 is a critical vulnerability in the Qualisys C++ SDK at commit a32a21a, involving multiple stack buffer overflows triggered via the GetCurrentFrame, SaveCapture, and LoadProject functions. Classified under CWE-120, it carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), highlighting its severe potential impact.

The vulnerability enables remote exploitation over the network with low complexity, requiring no privileges or user interaction. Attackers can achieve high impacts on confidentiality, integrity, and availability, potentially leading to arbitrary code execution or system crashes on affected systems integrating the vulnerable SDK.

Mitigation details are documented in the GitHub issue at https://github.com/qualisys/qualisys_cpp_sdk/issues/47. Security practitioners should review this reference for patches or workarounds specific to the SDK.