Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration

Impact 1 If an application is making use of the deprecated kit protocol HALs as the communication channel to the target device an attacker can masquerade as a device and return malformed packets of arbitrary length which the protocol stack will write to the stack. HALs intended for production use...

PT-2020-21259

Name of the Vulnerable Software and Affected Versions cryptoauthlib versions prior to 3.2.3 Description The issue allows an attacker to masquerade as a device and return malformed packets of arbitrary length, which the protocol stack will write to the stack, potentially causing a crash. This...