75 matches found
palera1n
palera1n A8 から A11、T2 デバイス向けの脱獄ツール。iOS/iPadOS/tvOS 15.0、bridgeOS 5.0 以降に対応。 --- ターミナルで palera1n を使用しているスクリーンショット 対応デバイス A11（iPhone X、8、8 Plus）では、脱獄状態の間はパスコードを無効にする必要があります （iOS 16 では、palera1n を進める前にデバイスをリセットする 必要があります）。 Apple T2 デバイス対応（クリックして展開） コンピュータの要件 1. USB-A ケーブルの使用をお勧めします。USB-C は palera1n や...
CVE-2026-12051
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051 NULL pointer dereference in USB DFU device_next download handler (handle_download)
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051
The CVE affects Zephyr’s USB DFU, specifically the device_next USB device stack. In handle_download() the code dereferences buf without verifying buf is NULL during DFU_DNLOAD with no Data OUT stage (zero-length terminate). This NULL pointer dereference on the control endpoint after transitioning...
CVE-2026-12051 NULL pointer dereference in USB DFU device_next download handler (handle_download)
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051 NULL pointer dereference in USB DFU device_next download handler (handle_download)
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
EUVD-2026-55939
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
CVE-2026-12051: NULL Pointer Dereference
The USB DFU class implementation in Zephyr's new experimental devicenext USB device stack contains a NULL pointer dereference in handledownload subsys/usb/devicenext/class/usbddfu.c. The handler computes MINsetup-wLength, buf-len and passes buf-data to the image write callback without checking th...
PT-2026-70061
Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description The USB DFU class implementation in the experimental device next USB device stack contains a NULL pointer dereference within the handle download function. This occurs when the handler processe...
USBurst
USBurst - DWC3 USB Descriptor Buffer Overflow Apple Secure Ro...
Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8 , that achieves arbitrary code execution inside the SecureROM of Apple's A12 and A13 chips. That code is burned into the silicon at manufacture. No software update can reach it. Affected devices will carry...
Siemens RuggedCom Rox Heap-based Buffer Overflow (CVE-2022-2347)
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download...
EUVD-2025-142626
Malicious code in butanaih-asfia-dfu npm...
EUVD-2020-2484
Malware in sbrugna...
EUVD-2019-18289
Malware in sbrugna...
EUVD-2020-7501
Malware in sbrugna...
EUVD-2021-26928
Malware in sbrugna...