Information disclosure

Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable...

CVE-2020-20950

CVE-2020-20950 describes Bleichenbacher’s attack on PKCS #1 v1.5 padding for RSA in Microchip Libraries for Applications (2018-11-26). The vulnerability arises when the vulnerable library allows an oracle-like interaction, enabling an attacker to decrypt a ciphertext by iteratively querying the s...

CVE-2020-20950

Bleichenbacher's attack on PKCS 1 v1.5 padding for RSA in Microchip Libraries for Applications 2018-11-26 All up to 2018-11-26. The vulnerability can allow one to use Bleichenbacher's oracle attack to decrypt an encrypted ciphertext by making successive queries to the server using the vulnerable...

Microchip Libraries for Applications Encryption Problem Vulnerability

Microchip Libraries for Applications is a microchip library for applications from Microchip. A cryptographic vulnerability exists in Microchip Libraries for Applications, which can be exploited by an attacker to decrypt information returned by the application in question, resulting in a disclosur...

Denial of Service Vulnerability in Rexchip Microelectronics Corporation's Rexchip Chip

Focusing on mobile Internet and digital multimedia chip design, Rexchip is a professional SOC solution provider for personal mobile information terminals. A denial-of-service vulnerability exists in Ruixin Microelectronics Corporation's Ruixin Micro chip, which can be exploited by attackers to...

Microchip CryptoAuthLib Buffer Overflow Vulnerability (CNVD-2020-62800)

Microchip CryptoAuthLib is a Microchip code library written in C for interaction with Microchip security devices. A buffer overflow vulnerability exists in versions prior to Microchip CryptoAuthentication Library CryptoAuthLib 20191122. No detailed vulnerability details are available at this time...

Microchip Atmel Advanced Software Framework Input Validation Error Vulnerability

The Microchip Atmel Advanced Software Framework is a code base for microprocessor embedded development from microchip. The code base simplifies the use of microcontrollers by providing an abstraction of the hardware through drivers and high-value middleware. A security vulnerability exists in Atm...

Microchip CryptoAuthLib Buffer Overflow Vulnerability

Microchip CryptoAuthLib is a Microchip code library written in C for interaction with Microchip security devices. A buffer overflow vulnerability exists in versions prior to Microchip CryptoAuthentication Library CryptoAuthLib 20191122, which stems from a buffer overflow in Microchip CryptoAuthLi...

CVE-2019-16128

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 1 of 2...

CVE-2019-16128

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 1 of 2...

Buffer overflow

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 1 of 2...

CVE-2019-16129

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 2 of 2...

CVE-2019-16129

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 2 of 2...

Buffer overflow

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 2 of 2...

CVE-2019-16128

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 1 of 2...

CVE-2019-16128

CVE-2019-16128 describes a buffer overflow in Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122. Red Hat and other sources reiterate the same issue (buffer overflow) in CryptoAuthLib; the vulnerability affects versions before 20191122. The Red Hat entry and CNVD/CVE reference...

CVE-2019-16129

The CVE-2019-16129 issue affects Microchip CryptoAuthentication Library (CryptoAuthLib). Multiple sources confirm a buffer overflow in CryptoAuthLib versions prior to 20191122, caused by unsafe handling that can lead to memory corruption (impacting confidentiality, integrity, and availability per...

CVE-2019-16129

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 2 of 2...

Rexchip Chips with Out-of-Bounds Read Vulnerability

With a R&D team specializing in system-on-chip design and algorithm research, Rexchip Microelectronics Corporation provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control and other fields. An out-of-bounds re...

Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration

Impact 1 If an application is making use of the deprecated kit protocol HALs as the communication channel to the target device an attacker can masquerade as a device and return malformed packets of arbitrary length which the protocol stack will write to the stack. HALs intended for production use...