PT-2025-52703 · Sound4 · Sound4 Linkandshare Transmitter

Published 2025-12-22 · Updated 2025-12-23 · CVE-2023-53966

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SOUND4 LinkAndShare Transmitter version 1.1.2

Description SOUND4 LinkAndShare Transmitter version 1.1.2 contains a format string vulnerability. This allows attackers to trigger memory stack overflows through maliciously crafted environment variables. Specifically, manipulating the username environment variable with format string payloads can potentially lead to arbitrary code execution and application crashes.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2023-53966

Affected Products

Sound4 Linkandshare Transmitter

References · 10

• 🔥 https://exploit-db.com/exploits/51259 · Exploit
• 🔥 https://zeroscience.mk/en/vulnerabilities/ZSL-2023-5744.php · Exploit
• 🔥 https://vulncheck.com/advisories/sound-linkandshare-transmitter-format-string-stack-buffer-overflow · Exploit
• https://osv.dev/vulnerability/CVE-2023-53966 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-53966 · Security Note
• https://twitter.com/CVEnew/status/2003233951402570014 · Twitter Post
• https://web.archive.org/web/20221207074555/https://sound4.com · Note
• https://twitter.com/CveFindCom/status/2003234064505999542 · Twitter Post
• https://t.me/CVEtracker/40434 · Telegram Post
• https://twitter.com/TheHackerWire/status/2003295962459222202 · Twitter Post