CVE-2021-3438

Root Cause Analysis of a Printer’s Driver Vulnerability

Ylabs2022-01-10T14:54:28+01:00Last week SentinelOne disclosed a "high severity" flaw in HP, Samsung, and Xerox printer's drivers (CVE-2021-3438); the blog post highlighted a vulnerable strncpy operation with a user-controllable size parameter but it did not explain the reverse engineering nor the exploitation phase of the issue. With this blog post, I would like to...