CVE-2022-38693

FDL1 fails to check the size of incoming data before storing it in memory, allowing an attacker to overflow a buffer and potentially crash the system or execute malicious code.

A missing payload size validation in FDL1 permits an unauthenticated network attacker to trigger a stack or heap buffer overflow by sending oversized data, potentially achieving remote code execution without elevated privileges.