CVE-2023-42801

CVE-2023-42801 is a buffer overflow vulnerability in Moonlight-common-c, affecting various Moonlight client applications. A malicious game streaming server could exploit this flaw to crash a Moonlight client, with potential for remote code execution (RCE) though mitigated by stack canaries in official builds. The vulnerability requires the client to be tricked into pairing with a malicious host, as man-in-the-middle attacks are prevented by public key pinning. With a CVSS score of 7.6 (High), the attack vector is network-based with low complexity, requiring user interaction, and primarily impacts availability, with some potential for confidentiality and integrity loss. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.