Roku

5 CVEs across 16 Roku products. Browse Roku vulnerabilities, severities, and proof-of-concept exploits.

Roku products with known CVEs

ProductCVEs
Indoor Camera Se3
Indoor Camera Se Firmware3
Express1
Express 4k\+1
Indoor Camera Se1
Roku1
Roku Firmware1
Roku OS1
Roku Tv1
Streambar1
Streambar Pro1
Streaming Stick 4k1
Streaming Stick 4k\+1
Ultra1
Wireless Speakers1
Wireless Subwoofer1
Roku CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2023-6324High8.12024-05-15ThroughTek Kalay SDK uses a predictable PSK value in the DTLS session when encountering an unexpected PSK identity
CVE-2023-6323Medium4.32024-05-15ThroughTek Kalay SDK does not verify the authenticity of received messages, allowing an attacker to impersonate an authoritative server.
CVE-2023-6322High7.22024-05-15A stack-based buffer overflow vulnerability exists in the message parsing functionality of the Roku Indoor Camera SE version 3.0.2.4679 and Wyze Cam v3 version…
CVE-2022-27152Medium5.72022-04-08Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification.
CVE-2018-11314Critical9.62018-07-03The External Control API in Roku and Roku TV products allow unauthorized access via a DNS Rebind attack. This can result in remote device control and privilege…