https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-29503.htmlhttps://patchthecve.com/cve/CVE-2022-29503.htmlWed, 17 Jun 2026 04:40:19 +0000CRITICAL 9.8: A memory corruption vulnerability exists in the libpthread linuxthreads functionality of uClibC 0.9.33.2 and uClibC-ng 1.0.40. Thread allocation can lead to memory corruption. An attacker can create threads to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-21806.htmlhttps://patchthecve.com/cve/CVE-2022-21806.htmlWed, 17 Jun 2026 04:27:01 +0000CRITICAL 9.8: A use-after-free vulnerability exists in the mips_collector appsrv_server functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to remote code execution. The device is exposed to attacks from the network.https://patchthecve.com/cve/CVE-2022-26073.htmlhttps://patchthecve.com/cve/CVE-2022-26073.htmlWed, 17 Jun 2026 04:34:38 +0000MEDIUM 6.5: A denial of service vulnerability exists in the libxm_av.so DemuxCmdInBuffer functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted set of network packets can lead to a device reboot. An attacker can send packets to trigger this vulnerability.https://patchthecve.com/cve/CVE-2022-25989.htmlhttps://patchthecve.com/cve/CVE-2022-25989.htmlWed, 17 Jun 2026 04:34:33 +0000HIGH 8.8: An authentication bypass vulnerability exists in the libxm_av.so getpeermac() functionality of Anker Eufy Homebase 2 2.1.8.5h. A specially-crafted DHCP packet can lead to authentication bypass. An attacker can DHCP poison to trigger this vulnerability.https://patchthecve.com/cve/CVE-2021-21953.htmlhttps://patchthecve.com/cve/CVE-2021-21953.htmlWed, 17 Jun 2026 03:36:25 +0000HIGH 8.1: An authentication bypass vulnerability exists in the process_msg() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted man-in-the-middle attack can lead to increased privileges.https://patchthecve.com/cve/CVE-2021-21952.htmlhttps://patchthecve.com/cve/CVE-2021-21952.htmlWed, 17 Jun 2026 03:36:25 +0000CRITICAL 9.8: An authentication bypass vulnerability exists in the CMD_DEVICE_GET_RSA_KEY_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to increased privileges.https://patchthecve.com/cve/CVE-2021-21955.htmlhttps://patchthecve.com/cve/CVE-2021-21955.htmlWed, 17 Jun 2026 03:36:25 +0000HIGH 7.5: An authentication bypass vulnerability exists in the get_aes_key_info_by_packetid() function of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. Generic network sniffing can lead to password recovery. An attacker can sniff network traffic to trigger this vulnerability.https://patchthecve.com/cve/CVE-2021-21954.htmlhttps://patchthecve.com/cve/CVE-2021-21954.htmlWed, 17 Jun 2026 03:36:25 +0000CRITICAL 9.9: A command execution vulnerability exists in the wifi_country_code_update functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to arbitrary command execution.https://patchthecve.com/cve/CVE-2021-21951.htmlhttps://patchthecve.com/cve/CVE-2021-21951.htmlWed, 17 Jun 2026 03:36:25 +0000CRITICAL 10.0: An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function read_udp_push_config_file. A specially-crafted network packet can lead to code execution.https://patchthecve.com/cve/CVE-2021-21950.htmlhttps://patchthecve.com/cve/CVE-2021-21950.htmlWed, 17 Jun 2026 03:36:25 +0000CRITICAL 10.0: An out-of-bounds write vulnerability exists in the CMD_DEVICE_GET_SERVER_LIST_REQUEST functionality of the home_security binary of Anker Eufy Homebase 2 2.1.6.9h in function recv_server_device_response_msg_process. A specially-crafted network packet can lead to code execution.https://patchthecve.com/cve/CVE-2021-21941.htmlhttps://patchthecve.com/cve/CVE-2021-21941.htmlWed, 17 Jun 2026 03:36:24 +0000CRITICAL 9.0: A use-after-free vulnerability exists in the pushMuxer CreatePushThread functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted set of network packets can lead to remote code execution.https://patchthecve.com/cve/CVE-2021-21940.htmlhttps://patchthecve.com/cve/CVE-2021-21940.htmlWed, 17 Jun 2026 03:36:23 +0000CRITICAL 10.0: A heap-based buffer overflow vulnerability exists in the pushMuxer processRtspInfo functionality of Anker Eufy Homebase 2 2.1.6.9h. A specially-crafted network packet can lead to a heap buffer overflow. An attacker can send a malicious packet to trigger this vulnerability.