proxmark3

proxmark3: the official Proxmark repository! ⚠️ This repository has been archived. It is no longer maintained. Active development has moved over to RRG Proxmark3 - Iceman Fork The proxmark3 is a powerful general purpose RFID tool, the size of a deck of cards, designed to snoop, listen and emulate...

amradio

AM Radio Break-in System A 12-channel AM radio broadcast system using Red Pitaya FPGA for emergency alert transmission in unmanned tunnels. Why AM radio in a tunnel? During construction and maintenance, vehicles with standard AM radios transit through tunnels that have no mobile coverage. AM...

boxlambda

About BoxLambda BoxLambda is a hardware-software crossover project creating a homebrew, retro-style FPGA-based microcomputer. The goal is to create a sandbox environment for experimenting with software and FPGA gateware. The Physical Setup The physical setup. Current Features Target FPGA:...

BTLE

BTLE BTLE is a free and open-source Bluetooth Low Energy BLE Software Defined Radio software suite and open BTLE chip design. It includes: BTLE baseband algorithms description, Python and Verilog implementation, FPGA and SkyWater 130 PDK OpenLane2 workflow results. Analog Devices AD9361 + Xilinx...

aegis

Aegis Aegis is a fully open-source FPGA, from the silicon up. Open-source FPGA efforts have made huge strides: projects like Project IceStorm and Apicula reverse-engineer proprietary bitstream formats, OpenFPGA and FABulous generate open FPGA fabric from architecture descriptions, and Cologne...

s6_pcie_microblaze

PCI Express DIY hacking toolkit General information Contents SP605 board configuration Software configuration Examples Using Python API Practical DMA attacks Option ROM attacks Troubleshooting Building project from the source code General information This repository contains a set of tools and...

nextpnr

nextpnr -- a portable FPGA place and route tool nextpnr aims to be a vendor neutral, timing driven, FOSS FPGA place and route tool. Currently nextpnr supports: Lattice iCE40 devices supported by Project IceStorm Lattice ECP5 devices supported by Project Trellis Lattice Nexus devices supported by...

phywhispererusb

PhyWhisperer-USB What is this thing? This is a hardware trigger for FI or SCA, which triggers on the USB phy. Be sure to read the documentation at http://phywhispererusb.readthedocs.io/ as well! If you are getting started, there are a few demonstration notebooks showing how to: Sniff Data Stream...

DMA-ProcessDumper

DMA-ProcessDumper Dumps entire memory of target process on the user-mode using DMA with MemProcFS over a PCIe FPGA device Building Copy leechcore.h, vmmdll.h and vmm.lib from MemProcFS into the DMA-ProcessDumper directory Compile using Visual Studio Copy leechcore.dll, vmm.dll and FTD3XX.dll from...

MicroC-u-os2-vuln-code-extracted-from-

MicroC-u-os2-vuln-code-extracted-from- Buffer Overflow Attack and Prevention for an FPGA Based Soft-Processor System - 7th International Conference on Innovation in Electronics and Communication EngineeringICIECE'18...

AtomicMemory

Reference FPGA Implementation Cyclone V This directory contains the reference RTL modules, precompiled FPGA images, and optional TCL test scripts for the atomic measurement–collapse primitive. This primitive is a CMOS-compatible hardware measurement–collapse mechanism that enforces single-read...

SUSE CVE-2026-89730

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in alteracvpsendblock dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or...

Astra Linux – Vulnerabilities in Linux 5.10, Linux 5.15, Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: fpga: region: adding the owner module and taking its reference count The current implementation of the fpga region assumes that the low-level module registers a driver for the parent device and uses its owner pointer to take the...

CVE-2026-89730

A flaw was found in the altera-cvp FPGA driver within the Linux kernel. The alteracvpsendblock function can perform an out-of-bounds read when processing the trailing bytes of an input buffer. This occurs if the buffer ends at a page or scatterlist boundary, causing the function to read past vali...

CVE-2026-89730

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in alteracvpsendblock dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or...

AZL-100439 CVE-2026-89730 affecting package kernel 6.6.150.1-1

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in alteracvpsendblock dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or...

CVE-2026-89730 fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in alteracvpsendblock dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or...

CVE-2026-89730

CVE-2026-89730 affects the Linux kernel 's altera-cvp FPGA driver. In the function altera_cvp_send_block() , the trailing-byte code path dereferences a u32 pointer even when only 1–3 bytes remain in the input buffer. When the buffer ends at a page or scatterlist boundary, this causes an out-of-bo...

CVE-2026-89730 fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in alteracvpsendblock dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or...

PT-2026-96454

In the Linux kernel, the following vulnerability has been resolved: fpga: altera-cvp: Avoid out-of-bounds read in trailing byte write The trailing byte path in altera cvp send block dereferences a u32 pointer even when only 1-3 bytes remain in the input buffer. If the buffer ends at a page or...