Buffer Overflow

libzephyr.so is vulnerable to Buffer Overflow. The vulnerability is caused by the insecure use of the sprintf() function. If the path parameter is PATH_MAX characters long, the sprintf() function will write one NULL byte off the stack variable mount_path. When the path parameter is attacker-controlled and crosses a security boundary, the attacker is able to exploit this vulnerability to cause a denial of service attacks or even execute arbitrary code.