245 matches found
Buffer overflow
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
CVE-2022-29246
Azure RTOS USBX DFU UPLOAD vulnerability (CVE-2022-29246) allows a potential buffer overflow prior to version 6.1.11. If a DFU UPLOAD request carries a wLength greater than UX_SLAVE_REQUEST_CONTROL_MAX_LENGTH (256 bytes), the code path in ux_device_class_dfu_read may copy data into a 256-byte buf...
CVE-2022-29246 Potential buffer overflow in function DFU upload in Azure RTOS USBX
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. Prior to version 6.1.11, he USBX DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory contents. In particular cases this may allow an attacker to bypass security features o...
CVE-2022-29246 Potential buffer overflow in function DFU upload in Azure RTOS USBX
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. Prior to version 6.1.11, he USBX DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory contents. In particular cases this may allow an attacker to bypass security features o...
CVE-2022-29246 Potential buffer overflow in function DFU upload in Azure RTOS USBX
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. Prior to version 6.1.11, he USBX DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory contents. In particular cases this may allow an attacker to bypass security features o...
CVE-2022-29223
Azure RTOS USBX contains a buffer overflow vulnerability in the USB host stack when processing a HUB descriptor with bNbPorts greater than UX_MAX_TT (default 8) in versions prior to 6.1.10. In particular, a HUB descriptor with bNbPorts = 255 can cause ux_host_class_hub_descriptor_get to write bey...
CVE-2022-29223 Buffer overflow on HUB descriptor in Azure RTOS USBX
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
CVE-2022-29223 Buffer overflow on HUB descriptor in Azure RTOS USBX
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...
Microsoft Azure RTOS USBX 安全漏洞
Microsoft Azure RTOS USBX is a high-performance USB host, device, and mobile OTG embedded stack open-sourced by Microsoft in the United States and fully integrated with Azure RTOS ThreadX. A security vulnerability exists in Microsoft Azure RTOS USBX versions prior to 6.1.10. An attacker exploits...
The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of the Azure RTOS exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Azure RTOS operating system, which arises due to insufficient validation of input data, allows attackers to escalate their privileges.
The vulnerability of the Azure RTOS exists due to insufficient checking of input data. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the Azure RTOS, related to deficiencies in the system’s controlled area segmentation, allows a intruder to gain unauthorized access to the device.
The vulnerability of the Azure RTOS is related to deficiencies in the segmentation of the system’s controlled area. Exploiting this vulnerability could allow an attacker to gain unauthorized access to the device...
CVE-2021-42323
Azure RTOS Information Disclosure Vulnerability...
CVE-2021-42323
Azure RTOS Information Disclosure Vulnerability...
CVE-2021-42302
Azure RTOS Elevation of Privilege Vulnerability...
CVE-2021-42303
Azure RTOS Elevation of Privilege Vulnerability...
CVE-2021-42302
Azure RTOS Elevation of Privilege Vulnerability...
CVE-2021-42304
Azure RTOS Elevation of Privilege Vulnerability...
