Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings.
A class has a cloneable() method that is not declared final, which allows an object to be created without calling the constructor. This can cause the object to be in an unexpected state.
Link | Tags |
---|---|
https://relieved-knuckle-264.notion.site/Reolink-Task-Hijacking-21a437003642808ba21fd79530a21e96 | third party advisory exploit |