Skip to main content

CVE mentions, exploit signals, and PoC evidence in one fast public view.

Vendor archive

roku CVEs

Beta · best-effort

5 CVEs tagged to vendor roku — 1 Critical, 2 High, 2 Medium, 0 Low, 0 Unrated.

See this archive with more filters View vendor evidence profile Explore

CVE-2023-6324

Published May 15, 2024

ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2023-6323

Published May 15, 2024

ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.

CVSS 4.3 · Medium

Vendor/product tagsBeta · best-effort

CVE-2023-6322

Published May 15, 2024

A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version 4.36.11.5859. A spe…

CVSS 7.2 · High

Vendor/product tagsBeta · best-effort

CVE-2022-27152

Published Apr 8, 2022

Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification.

CVSS 5.7 · Medium

Vendor/product tagsBeta · best-effort

CVE-2018-11314

Published Jul 3, 2018

The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privileged device and network…

CVSS 9.6 · Critical

Vendor/product tagsBeta · best-effort

Showing 1-5 of 5 CVEsPage 1 of 1