Vulnerabilities

TI-2023-22892 CVE-2023-42801

Stack buffer overflow due to `strcpy` into fixed size buffer in `extractVersionQuadFromString`

LOW 35

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.00936 Published 2023-12-14 No fix listed CWE-120

TI-2023-22891 CVE-2023-42800

HIGH 73

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01881 Published 2023-12-14 Fixed in 24750d4 CWE-120

TI-2023-22890 CVE-2023-42799

HIGH 73

Moonlight-common-c contains the core GameStream client code shared between Moonlight clients.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01881 Published 2023-12-14 Fixed in 02b7742 CWE-120

TI-2020-08898 CVE-2020-11024

LOW 37

In Moonlight iOS/tvOS before 4.0.1, the pairing process is vulnerable to a man-in-the-middle attack.

CVSS 3.1HIGH 8.2 Network Low privileges No interaction EPSS 0.00802 Published 2020-04-29 Fixed in 4.0.1 CWE-300