CVE-2022-29503: Anker Eufy Homebase 2 Firmware

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.

Affected products

• Anker Eufy Homebase 2 Firmware: version 2.1.8.8h only
• Uclibc Uclibc: version 0.9.33.2 only
• Uclibc-NG Project Uclibc-NG: version 1.0.40 only

Published 2022-09-29. Last modified 2026-06-17.