RootCauseunvalidated
upd->strings[S_YMOVE].data and upd->string_a[SA_WRITECOMP].data[icomp].data as fmt args — devices/gdevupd.c. Tension: fully attacker-controlled. Outcome: Same pattern of user-controlled command templates fed to printf-family is the general anti-pattern.
46707074-8a77-4589-bb9a-494815b86dde
upd->strings[S_YMOVE].data and upd->string_a[SA_WRITECOMP].data[icomp].data as fmt args — devices/gdevupd.c. Tension: fully attacker-controlled. Outcome: Same pattern of user-controlled command templates fed to printf-family is the general anti-pattern.