Arduino and AVR Board Security Vulnerabilities

Arduino AVR Boards is an open-source software kernel of Arduino. Versions of Arduino AVR Boards prior to 1.8.7 contained security vulnerabilities. These vulnerabilities stemmed from stack buffer overflows during the conversion of high-precision floating-point numbers into strings, which could lea...

Fedora 44 : avr-binutils (2025-e14cb89c28)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-e14cb89c28 advisory. Automatic update for avr-binutils-2.45-4.fc44. Changelog Mon Oct 20 2025 Michal Hlavinka - 1:2.45-4 - fix CVE-2025-11083: heap-based overflow rhbz2400336...

Fedora 44 : avr-binutils (2025-005897ba3d)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2025-005897ba3d advisory. Automatic update for avr-binutils-2.45-2.fc44. Changelog Thu Oct 16 2025 Michal Hlavinka - 1:2.45-2 - fix CVE-2025-11081: out-of-bounds read rhbz2400332...

EUVD-2006-2706

Malware in sbrugna...

EUVD-2014-8345

Malware in sbrugna...

EUVD-2006-2711

Malware in sbrugna...

EUVD-2006-2705

Malware in sbrugna...

EUVD-2006-2712

Malware in sbrugna...

EUVD-2006-2713

Malware in sbrugna...

EUVD-2006-2715

Malware in sbrugna...

EUVD-2019-16214

Malware in sbrugna...

EUVD-2006-2704

Malware in sbrugna...

EUVD-2006-2707

Malware in sbrugna...

EUVD-2006-2710

Malware in sbrugna...

EUVD-2006-2708

Malware in sbrugna...

EUVD-2006-2703

Malware in sbrugna...

A Comparative Analysis of Lightweight Hash Functions Using AVR ATXMega128 and ChipWhisperer

Lightweight hash functions have become important building blocks for security in embedded and IoT systems. A plethora of algorithms have been proposed and standardized, providing a wide range of performance trade-off options for developers to choose from. This paper presents a comparative analysi...

CVE-2024-23805

Undisclosed requests can cause the Traffic Management Microkernel TMM to terminate. For the Application Visibility and Reporting module, this may occur when the HTTP Analytics profile with URLs enabled under Collected Entities is configured on a virtual server and the DB variables...

Arduino: Remote Code Execution

Background Arduino is an open-source AVR electronics prototyping platform. Description A vulnerability has been discovered in Arduino. Please review the CVE identifier referenced below for details. Impact Arduino bundles a vulnerable version of log4j that may lead to remote code execution...

The vulnerability of the `avr_elf32_load_records_from_section()` function in the GNU Binutils development environment, related to writing beyond the buffer boundaries in memory, allows a malicious actor to trigger a system failure.

The vulnerability of the avrelf32loadrecordsfromsection function in the GNU Binutils development environment is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to cause a system failure...