108 matches found
CVE-2026-56111
CVE-2026-56111 - Marlin M421 越界写入 针对CVE-2026-56111 的概念验证，该漏洞是Marlin固件在启用MESHBEDLEVELING构建时，M421 G代码处理程序中的越界写入。 公告：https://www.vulncheck.com/advisories/marlin-firmware-out-of-bounds-write-via-m421-g-code-handler 受影响：Marlin 用于USB，例如 /dev/ttyUSB0 或 /dev/ttyACM0（如需可加上--baud N；许多主板使用250000） --tcp...
Exploit for CVE-2026-56111
CVE-2026-56111 - Marlin M421 Out-of-bounds Write Proof of con...
EUVD-2026-38797
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111
Marlin Firmware 2.1.2.7 with MESH_BED_LEVELING enabled is affected. The vulnerability is an out-of-bounds write in the M421 G-code handler that allows an attacker-controlled 32-bit float value to be written past the z_values array bounds by providing crafted X/Y grid indices. This can corrupt adj...
CVE-2026-56111 Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111 Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111 Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111: Improper Validation of Array Index
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
EUVD-2025-117385
Malicious code in fascinating-coral-marlin npm...
Malicious code in cooing_marlin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca25b58ab3f57fa132c4e39e9b084197b142e8343fae10adab5c8f70321604cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
Malicious code in ridiculous_marlin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc8b171b10e7a56f31edf8be1ee25fc60a3b5e3f870cf9c56a2bd5e4e29377f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-98080
Malicious code in ideologicalmarlinz3n npm...
EUVD-2025-99273
Malicious code in enthusiasticmarlinz3n npm...
EUVD-2025-100227
Malicious code in cooingmarlinz3n npm...
EUVD-2025-104143
Malicious code in linearmarlinz3n npm...
MAL-2025-128262 Malicious code in linear_marlin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2470c2fc8160e73373e5068564f22aa331cd53da6638f6976d8f19c08c9e4d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...