91 matches found
Eclipse ThreadX USBX security vulnerabilities
Eclipse ThreadX USBX is an open-source version of Eclipse ThreadX, which includes a USB host, device, and mobile embedded stack. There is a security vulnerability in Eclipse ThreadX USBX, caused by the uxhostclassstoragemediamount function having unlimited recursive depth, which may lead to a sta...
CVE-2025-55098: Out-of-bounds Read
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiodevicetypeget when parsing a descriptor of an USB audio device...
CVE-2025-55100: Out-of-bounds Read
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudio10samparsefunc when parsing a list of sampling frequencies...
Eclipse ThreadX USBX 缓冲区错误漏洞
Eclipse ThreadX USBX is an open source USB host, device and mobile embedded stack for Eclipse ThreadX. A buffer error vulnerability exists in Eclipse ThreadX USBX versions prior to 6.4.3, which stems from a potential out-of-bounds read issue when parsing a list of sampling frequencies...
Eclipse ThreadX USBX 缓冲区错误漏洞
Eclipse ThreadX USBX is an open source USB host, device and mobile embedded stack for Eclipse ThreadX. A buffer error vulnerability exists in Eclipse ThreadX USBX versions prior to 6.4.3 that stems from a potential out-of-bounds read when parsing an attacker-controlled frequency field descriptor...
CVE-2025-55097: Out-of-bounds Read
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudiostreamingsamplingget when parsing a descriptor of an USB streaming device...
CVE-2025-55099: Out-of-bounds Read
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclassaudioalternatesettinglocate when parsing a descriptor with attacker-controlled frequency fields...
CVE-2025-55096: Integer Underflow (Wrap or Wraparound)
In USBX before 6.4.3, the USB support module for Eclipse Foundation ThreadX, there was a potential out of bound read issue in uxhostclasshidreportdescriptorget when parsing a descriptor of an USB HID device...
EUVD-2022-33585
Malicious code in bioql PyPI...
EUVD-2023-52738
Malicious code in bioql PyPI...
EUVD-2023-52742
Malicious code in bioql PyPI...
EUVD-2022-41790
Malicious code in bioql PyPI...
EUVD-2022-38825
Malicious code in bioql PyPI...
EUVD-2023-52741
Malicious code in bioql PyPI...
EUVD-2023-52739
Malicious code in bioql PyPI...
EUVD-2022-33601
Malicious code in bioql PyPI...
CVE-2023-48698
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host...
CVE-2023-48695
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in host and...
CVE-2022-29246
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. Prior to version 6.1.11, he USBX DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory contents. In particular cases this may allow an attacker to bypass security features o...
CVE-2022-29223
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with bNbPorts set to a value greater than UXMAXTT which defaults to 8. For a bNbPorts value of...