99 matches found
palera1n
palera1n Jailbreak for A8 through A11, T2 devices, on iOS/iPadOS/tvOS 15.0, bridgeOS 5.0 and higher. --- A screenshot of palera1n being used in a Terminal Device Support iPhones| iPads| iPods| Apple TVs ---|---|---|--- iPhone 6s| iPad mini 4| iPod Touch 7th generation| Apple TV HD iPhone 6s Plus|...
EUVD-2026-92813
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...
CVE-2026-0461
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...
CVE-2026-0461
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...
CVE-2026-0461
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...
CVE-2026-0461
The AMD Zynq™ UltraScale+ MPSoC and RFSoC devices are vulnerable to a buffer overflow due to insufficient boundary validation in the USB boot mode implementation. An attacker could send unbounded Device Firmware Upgrade (DFU) download requests, causing the DDR receive buffer to overflow into FSBL...
PT-2026-106241
Name of the Vulnerable Software and Affected Versions AMD Zynq™ UltraScale+ MPSoC affected versions not specified AMD RFSoC affected versions not specified Description Insufficient boundary validation in the USB boot mode implementation allows unbounded Device Firmware Upgrade DFU download reques...
CVE-2026-0461: Out-of-bounds Write
Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download requests to overflow the DDR receive buffer into FSBL memory, potentially resulting in unauthorized code execution durin...
AMD Zynq™ UltraScale+ MPSoC and RFSoC Devices – Secure Boot Bypass via Unbounded DFU Download Requests
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0461| Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download...
AMD Zynq™ UltraScale+ MPSoC and RFSoC Devices – Secure Boot Bypass via Unbounded DFU Download Requests
CVE Details Refer to Glossary for explanation of terms CVE| CVE Description| CVSS Base Score ---|---|--- CVE-2026-0461| Insufficient boundary validation in the USB boot mode implementation of AMD Zynq™ UltraScale+ MPSoC and RFSoC devices could allow unbounded Device Firmware Upgrade DFU download...
CVE-2026-12051
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051 NULL pointer dereference in USB DFU device_next download handler (handle_download)
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051 NULL pointer dereference in USB DFU device_next download handler (handle_download)
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051
The CVE affects Zephyr’s USB DFU, specifically the device_next USB device stack. In handle_download() the code dereferences buf without verifying buf is NULL during DFU_DNLOAD with no Data OUT stage (zero-length terminate). This NULL pointer dereference on the control endpoint after transitioning...
CVE-2026-12051 NULL pointer dereference in USB DFU device_next download handler (handle_download)
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
EUVD-2026-55939
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051: NULL Pointer Dereference
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
PT-2026-70061
Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The USB DFU class implementation in the experimental device next USB device stack contains a NULL pointer dereference within the handle download function. This occurs when the handler processe...
