PT-2020-6734

Name of the Vulnerable Software and Affected Versions QEMU affected versions not specified Description A divide-by-zero issue was found in the dwc2 handle packet function in the hw/usb/hcd-dwc2.c file of the hcd-dwc2 USB host controller emulation. This issue could be exploited by a malicious gues...

PT-2020-6461

Name of the Vulnerable Software and Affected Versions QEMU version 5.0.0 Description The issue is related to the hw/usb/hcd-ohci.c component in the QEMU hardware emulator, which can lead to an infinite loop when a TD list has a loop. This can cause a denial of service. Recommendations For QEMU...

PT-2020-11862

Name of the Vulnerable Software and Affected Versions zephyr versions 1.14.1 through 2.1.0 and later versions. Description The issue is related to a potential buffer overflow in USB DFU where the requested length is not checked against the buffer size. This could be exploited by a malicious USB...

CVE-2020-10019: Buffer Copy without Checking Size of Input

USB DFU has a potential buffer overflow where the requested length wLength is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version...

CVE-2019-18830

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code...

CVE-2019-18826: Improper Certificate Validation

Barco ClickShare Button R9861500D01 devices before 1.9.0 have Improper Following of a Certificate's Chain of Trust. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, does not properly validate the whole certificate chain...

Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch

The xhciringfetch function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash by leveraging failure to limit the number of link Transfer Request Blocks TRB to process...

UBUNTU-CVE-2017-9330

QEMU aka Quick Emulator before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service infinite loop by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505...

DEBIAN-CVE-2017-5973

The xhcikickepctx function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service infinite loop and QEMU process crash via vectors related to control transfer descriptor sequence...

ALPINE-CVE-2016-7995

Memory leak in the ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via a large number of crafted buffer page select PG indexes...

PT-2016-2607

Name of the Vulnerable Software and Affected Versions Android versions prior to 2016-08-05 Description The issue is related to the drivers/usb/host/ehci-msm2.c file in the Qualcomm components of the Android operating system. It omits certain minimum calculations before copying data, allowing...

USB Host Diagnostics - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application USB Host Diagnostics published at the 'play' market has multiple vulnerabilities...

QEMU 'hw/usb/hcd-ohci.c' Denial of Service Vulnerability

QEMU is a suite of analog processor software. A security vulnerability in QEMU 'hw/usb/hcd-ohci.c' allows attackers to exploit the vulnerability to crash the QEMU process and cause a denial of service...

CVE-2014-1287

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption via crafted USB messages...

CVE-2014-1287

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption via crafted USB messages...

CVE-2014-1287

CVE-2014-1287 affects Apple devices via USB Host: in iOS versions before 7.1 and Apple TV before 6.1, sending crafted USB messages to a HID device can cause kernel memory corruption, potentially enabling arbitrary code execution or a reboot. The vulnerability is tied to the kernel panic path when...

CVE-2014-1287: Improper Restriction of Operations within the Bounds of a Memory Buffer

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption via crafted USB messages...

Apple iOS < 7.1 Multiple Vulnerabilities

Binary data 8155.prm...

Apple iOS < 7.1 Multiple Vulnerabilities

Binary data appleios71check.nbin...

Code injection

The Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces, which allows local users to cause a denial of service system crash via a crafted application...