CVE-2026-68368

A flaw was found in the Linux kernel's USB gadget NCM Network Control Model driver. This vulnerability occurs because the driver fails to properly validate the boundaries of datagrams and Network Transfer Blocks NTBs supplied by a USB host. A malicious USB host can exploit this by crafting specif...

PT-2020-11862

Name of the Vulnerable Software and Affected Versions zephyr versions 1.14.1 through 2.1.0 and later versions. Description The issue is related to a potential buffer overflow in USB DFU where the requested length is not checked against the buffer size. This could be exploited by a malicious USB...

CVE-2020-10019: Buffer Copy without Checking Size of Input

USB DFU has a potential buffer overflow where the requested length wLength is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version...