Reolink v4.54.0.4.20250526 was discovered to contain a task hijacking vulnerability due to inappropriate taskAffinity settings. NOTE: this is disputed by the Supplier because it is intentional behavior to ensure a predictable user experience.
Weakness
A class has a cloneable() method that is not declared final, which allows an object to be created without calling the constructor. This can cause the object to be in an unexpected state.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Reolink | Reolink | 4.54.0.4.20250526 (including) | 4.54.0.4.20250526 (including) |