Heap overflow

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...

CVE-2021-3625

CVE-2021-3625 concerns a heap-based buffer overflow (CWE-122) in Zephyr’s USB DFU DNLOAD path. Affected product: Zephyr RTOS; vulnerable component is the USB DFU DNLOAD code, with root cause described as a heap-based overflow. Impact details in sources indicate a potential for memory data leakage...

CVE-2021-3625

Buffer overflow in Zephyr USB DFU DNLOAD. Zephyr versions = v2.5.0 contain Heap-based Buffer Overflow CWE-122. For more information, see https://github.com/zephyrproject-rtos/zephyr/security/advisories/GHSA-c3gr-hgvr-f363...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

Code injection

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

CVE-2020-15509

CVE-2020-15509 affects Nordic Semiconductor Android BLE Library up to 2.2.1 and the DFU Library up to 1.10.4 (used by nRF Connect and others). The issue is unencrypted communication being presented as encrypted, originating from the bond creation path (e.g., internalCreateBond in BleManagerHandle...

CVE-2020-15509

Nordic Semiconductor Android BLE Library through 2.2.1 and DFU Library through 1.10.4 for Android as used by nRF Connect and other applications can engage in unencrypted communication while showing the user that the communication is purportedly encrypted. The problem is in bond creation e.g.,...

Zephyr Buffer Overflow Vulnerability (CNVD-2020-35000)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. A buffer overflow vulnerability exists in the USB DFU in Zephyr version 1.14.1 and later and version 2.1.0 and later. A remote attacker could exploit this vulnerability to execute code...

CVE-2020-10019

USB DFU has a potential buffer overflow where the requested length wLength is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version...

Buffer overflow

USB DFU has a potential buffer overflow where the requested length wLength is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version...

CVE-2020-10019 Buffer Overflow in USB DFU requested length

USB DFU has a potential buffer overflow where the requested length wLength is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version...

CVE-2020-10019

CVE-2020-10019 describes a buffer overflow in Zephyr’s USB DFU path. The flaw occurs when the requested length (wLength) is not validated against the destination buffer size, enabling exploitation by a USB host. Affected products are Zephyr RTOS releases 1.14.1 and later, and 2.1.0 and later. The...

Fake iOS Jailbreak Site Lures in Apple Users

Bad actors are taking advantage of a recently-disclosed iOS bug with a fake website claiming to give iPhone users the ability to jailbreak their phones. In reality, researchers warn, the site ultimately enables attackers to conduct click fraud. A jailbreak, a method to escape Apple’s limitations ...

New iOS exploit checkm8 allows permanent compromise of iPhones

UPDATE 9/27, 11:00am: Updated for the misconception that the bootrom was actually being modified. Apparently, the "permanent" only refers to the fact that the bug is in the bootrom, where it cannot be patched. UPDATE 9/27, 12:15am: After speaking with @axi0m8, clarified a few other points,...