d-os-descriptor

d-os-descriptor Краткое описание Подсистема USB Gadget содержит уязвимости в разделе обработки OS-дескрипторов функции compositesetup composite.c. Обработка специально сформированных сообщений запросов управления передачей control transfer приводит к сбою устройства из-за разыменования нулевого...

The vulnerability of the composite_setup() function in the drivers/usb/gadget/composite.c module of the Linux USB device driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the compositesetup function in the drivers/usb/gadget/composite.c module of the Linux USB device driver relates to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, an...

ASB-A-222023189

In compositesetup of composite.c, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege when connecting a malicious USB device with no additional execution privileges needed. User interaction is not needed for exploitation...