The vulnerability consists of multiple buffer overflows within the admin user interface of EZCast Pro II dongle firmware version 1.17478.146. These overflows can lead to program crashes and potentially allow an attacker to execute arbitrary code on the device. The weakness corresponds to CWE‑120, a classic buffer overflow.

Affected devices are EZCast Pro II USB dongles running firmware 1.17478.146. No other products or versions are listed.

The CVSS score of 7.3 indicates a high severity vulnerability. The EPSS score of less than 1% suggests that, at the time of analysis, exploitation attempts are unlikely to be widespread, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector involves access to the local network and submission of malicious input to the admin UI; therefore an attacker would need network connectivity to the device. Because the flaw can lead to arbitrary code execution, if exploited it could give the attacker full control over the dongle.