CVE-2022-29246

🗓️ 24 May 2022 15:00:16Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 77 Views

Azure RTOS USBX version prior to 6.1.11 allows buffer overflow via USBX DFU UPLOAD, potentially leading to arbitrary code execution

Reporter	Title	Published	Views	Family All 8
CNNVD	Microsoft Azure RTOS USBX 安全漏洞	24 May 202200:00	–	cnnvd
Cvelist	CVE-2022-29246 Potential buffer overflow in function DFU upload in Azure RTOS USBX	24 May 202215:00	–	cvelist
EUVD	EUVD-2022-33601	3 Oct 202520:07	–	euvd
NVD	CVE-2022-29246	24 May 202215:15	–	nvd
OSV	CVE-2022-29246 Potential buffer overflow in function DFU upload in Azure RTOS USBX	24 May 202215:00	–	osv
Prion	Buffer overflow	24 May 202215:15	–	prion
RedhatCVE	CVE-2022-29246	6 Feb 202500:00	–	redhatcve
Vulnrichment	CVE-2022-29246 Potential buffer overflow in function DFU upload in Azure RTOS USBX	24 May 202215:00	–	vulnrichment

NVD

Vulners

Node

eclipse threadx_usbxRange<6.1.11

[
  {
    "product": "usbx",
    "vendor": "azure-rtos",
    "versions": [
      {
        "status": "affected",
        "version": "< 6.1.11"
      }
    ]
  }
]

Source	Link
github	www.github.com/azure-rtos/usbx/blob/master/common/usbx_device_classes/src/ux_device_class_dfu_control_request.c
github	www.github.com/azure-rtos/usbx/releases/tag/v6.1.11_rel
github	www.github.com/azure-rtos/usbx/security/advisories/GHSA-hh5p-x584-j8hv