CVE-2024-8946 MicroPython VFS Unmount vfs.c mp_vfs_umount heap-based overflow

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mpvfsumount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit...

CVE-2024-8946

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mpvfsumount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit...

CVE-2024-8946

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mpvfsumount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit...

CVE-2024-8948: Heap-based Buffer Overflow

A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpzasbytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and ma...

CVE-2024-8947: Use After Free

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexity of an attack is rather high. The...

CVE-2024-8946: Heap-based Buffer Overflow

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mpvfsumount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit...

PT-2024-39333

Name of the Vulnerable Software and Affected Versions: MicroPython version 1.23.0 Description: A critical issue has been found, affecting the mpz as bytes function of the file py/objint.c. This issue leads to a heap-based buffer overflow. The attack can be launched remotely. The problem arises wh...

MicroPython resource management error vulnerability

MicroPython is a small open source Python programming language interpreter open-sourced by MicroPython. A resource management error vulnerability exists in MicroPython version 1.22.2, which stems from unknown functionality in the py/objarray.c file that leads to reuse after release...

MicroPython security vulnerabilities

MicroPython is a small open source Python programming language interpreter open-sourced by MicroPython. A security vulnerability exists in MicroPython version 1.23.0, which originates in the mpzasbytes function in the py/objint.c file, and causes a heap buffer overflow write error when converting...

PT-2024-39332

Name of the Vulnerable Software and Affected Versions: MicroPython version 1.22.2 Description: A critical issue has been found in the MicroPython objarray component, where resizing and copying a bytes object into itself may reference memory that has already been freed, leading to use after free...

PT-2024-39331 · Unknown +2 · Micropython +2

Name of the Vulnerable Software and Affected Versions: MicroPython version 1.23.0 Description: A critical issue has been found in the VFS Unmount Handler component, specifically in the function mp vfs umount of the file extmod/vfs.c. This issue leads to a heap-based buffer overflow. The attack ca...

MicroPython security vulnerabilities

MicroPython is a small open source Python programming language interpreter open-sourced by MicroPython. A security vulnerability exists in MicroPython version 1.23.0, which originates in the mpvfsumount function in the VFS Unmount Handler component, which compares a mount path string and an unmou...

Fedora: Security Advisory (FEDORA-2024-a3b517705e)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-34aa24af35)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

OPENSUSE-SU-2024:13566-1 micropython-1.22.0-1.1 on GA media

These are all security issues fixed in the micropython-1.22.0-1.1 package on the GA media of openSUSE Tumbleweed...

Fedora 40 : micropython (2024-a3b517705e)

The remote Fedora 40 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-a3b517705e advisory. - Update to 1.22.2 - Security fixes for CVE-2023-7158 and CVE-2023-7152 Tenable has extracted the preceding description block directly from the Fedo...

[SECURITY] Fedora 40 Update: micropython-1.22.2-1.fc40

Implementation of Python 3 with very low memory footprint...

[SECURITY] Fedora 38 Update: micropython-1.22.2-1.fc38

Implementation of Python 3 with very low memory footprint...

Fedora 38 : micropython (2024-51e55a7065)

The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-51e55a7065 advisory. - Update to 1.22.2 - Security fixes for CVE-2023-7158 and CVE-2023-7152 Tenable has extracted the preceding description block directly from the Fedo...

Fedora 39 : micropython (2024-34aa24af35)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-34aa24af35 advisory. - Update to 1.22.2 - Security fixes for CVE-2023-7158 and CVE-2023-7152 Tenable has extracted the preceding description block directly from the Fedo...