105 matches found
Eclipse ThreadX USBX security vulnerabilities
Eclipse ThreadX USBX is an open-source version of Eclipse ThreadX, which includes a USB host, device, and mobile embedded stack. There is a security vulnerability in Eclipse ThreadX USBX, caused by the uxhostclassstoragemediamount function having unlimited recursive depth, which may lead to a sta...
Eclipse ThreadX USBX 缓冲区错误漏洞
Eclipse ThreadX USBX is an open source USB host, device and mobile embedded stack for Eclipse ThreadX. A buffer error vulnerability exists in Eclipse ThreadX USBX versions prior to 6.4.3, which stems from a potential out-of-bounds read issue when parsing a list of sampling frequencies...
CVE-2025-55100: Out-of-bounds Read
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudio10samparsefunc when parsing a list of sampling frequencies...
CVE-2025-55099: Out-of-bounds Read
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudioalternatesettinglocate when parsing a descriptor with attacker-controlled frequency fields...
CVE-2025-55098: Out-of-bounds Read
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiodevicetypeget when parsing a descriptor of an USB audio device...
CVE-2025-55097: Out-of-bounds Read
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiostreamingsamplingget when parsing a descriptor of an USB streaming device...
CVE-2025-55096: Integer Underflow (Wrap or Wraparound)
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclasshidreportdescriptorget when parsing a descriptor of an USB HID device...
Eclipse ThreadX USBX 缓冲区错误漏洞
Eclipse ThreadX USBX is an open source USB host, device and mobile embedded stack for Eclipse ThreadX. A buffer error vulnerability exists in Eclipse ThreadX USBX versions prior to 6.4.3 that stems from a potential out-of-bounds read when parsing an attacker-controlled frequency field descriptor...
PT-2025-42589
Name of the Vulnerable Software and Affected Versions USBX versions prior to 6.4.3 Description The USB support module for Eclipse Foundation ThreadX contains a potential out-of-bounds read issue within the ux host class audio alternate setting locate function. This occurs when parsing a descripto...
PT-2025-42590
Name of the Vulnerable Software and Affected Versions USBX versions prior to 6.4.3 Description The USB support module for Eclipse Foundation ThreadX contains a potential out-of-bounds read issue within the ux host class audio10 sam parse func function when processing a list of sampling frequencie...
EUVD-2023-52741
Malicious code in bioql PyPI...
EUVD-2022-33601
Malicious code in bioql PyPI...
EUVD-2023-52738
Malicious code in bioql PyPI...
EUVD-2023-52739
Malicious code in bioql PyPI...
EUVD-2022-41790
Malicious code in bioql PyPI...
EUVD-2023-52742
Malicious code in bioql PyPI...
EUVD-2022-38825
Malicious code in bioql PyPI...
EUVD-2022-33585
Malicious code in bioql PyPI...
CVE-2023-48698
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host...
CVE-2023-48695
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host and...