Description
Genymobile/scrcpy versions up to and including 3.3.3, prior to commit 3e40b24, contain a buffer overflow vulnerability in the sc_device_msg_deserialize() function. A compromised device can send crafted messages that cause out-of-bounds reads, which may result in memory corruption or a denial-of-service condition. This vulnerability may allow further exploitation on the host system.
Problem types
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
Product status
Any version
commit 3e40b24 (custom)
Credits
Vlatko Kosturjak with Marlink Cyber
References
github.com/...SAID-2025-003-scrcpy-global-buffer-overflow.md
github.com/...SAID-2025-003-scrcpy-global-buffer-overflow.md
github.com/Genymobile/scrcpy/issues/6415
github.com/Genymobile/scrcpy/commit/3e40b24
www.vulncheck.com/...enymobile-scrcpy-global-buffer-overflow
Data based on CVE®. Copyright © 1999-2025, The MITRE Corporation. All rights reserved.