CVE-2013-2223

CVE-2013-2223 describes a vulnerability in GNU ZRTPCPP versions prior to 3.2.0, allowing remote attackers to extract sensitive uninitialized heap memory or trigger a denial of service through an out-of-bounds read. This flaw is exploited by crafting a malicious packet, such as a truncated Ping packet, which is mishandled by the getEpHash function. With a CVSS score of 5.8, this vulnerability has a medium attack complexity and can be exploited remotely without authentication, leading to partial confidentiality and availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.