Description
Medtronic MyCareLink Patient Monitor has an internal service that deserializes data, which allows a local attacker to interact with the service by crafting a binary payload to crash the service or elevate privileges. This issue affects MyCareLink Patient Monitor models 24950 and 24952: before June 25, 2025
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Medtronic MyCareLink Patient Monitor 24950
Default version status: unaffected
0 to < June 25, 2025affected
Medtronic MyCareLink Patient Monitor 24952
Default version status: unaffected
0 to < June 25, 2025affected