A heap-based buffer overflow occurs when AiDot devices parse the SSDP location header, allowing an attacker to send crafted packets that overwrite memory on the device. If the overflow is triggered, the attacker could execute arbitrary code, compromising the device’s confidentiality, integrity, and availability.

Multiple AiDot devices that support SSDP are affected. No specific vendor, product, or firmware version details are disclosed in the CVE data.

The attack requires transmitting malformed SSDP packets over the local network. The EPSS score is below 1 % and the vulnerability is not listed in the CISA KEV catalog, but any host on the same LAN could potentially trigger the overflow, producing a moderate risk in environments that permit SSDP traffic. The CVSS score of 9.8 indicates critical severity, meaning successful exploitation would allow full control over the device.