102 matches found
CVE-2026-56111
CVE-2026-56111 - Marlin M421 Out-of-bounds Write Proof of concept for CVE-2026-56111 , an out-of-bounds write in the M421 G-code handler of Marlin Firmware when built with MESHBEDLEVELING. Advisory: https://www.vulncheck.com/advisories/marlin-firmware-out-of-bounds-write-via-m421-g-code-handler...
EUVD-2026-38797
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111
Marlin Firmware 2.1.2.7 with MESH_BED_LEVELING enabled is affected. The vulnerability is an out-of-bounds write in the M421 G-code handler that allows an attacker-controlled 32-bit float value to be written past the z_values array bounds by providing crafted X/Y grid indices. This can corrupt adj...
CVE-2026-56111 Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111 Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
CVE-2026-56111 Marlin Firmware 2.1.2.7 Out-of-Bounds Write via M421 G-code Handler
Marlin Firmware through 2.1.2.7, fixed in commit 1f255d1, when built with MESHBEDLEVELING enabled, contains an out-of-bounds write vulnerability in the M421 G-code handler that allows attackers to corrupt firmware memory by supplying out-of-range X and Y grid indices. Attackers can send a single...
EUVD-2025-117385
Malicious code in fascinating-coral-marlin npm...
EUVD-2025-99273
Malicious code in enthusiasticmarlinz3n npm...
Malicious code in ridiculous_marlin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8dc8b171b10e7a56f31edf8be1ee25fc60a3b5e3f870cf9c56a2bd5e4e29377f This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-104143
Malicious code in linearmarlinz3n npm...
MAL-2025-128262 Malicious code in linear_marlin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 2470c2fc8160e73373e5068564f22aa331cd53da6638f6976d8f19c08c9e4d56 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-98080
Malicious code in ideologicalmarlinz3n npm...
Malicious code in cooing_marlin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ca25b58ab3f57fa132c4e39e9b084197b142e8343fae10adab5c8f70321604cf This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-100227
Malicious code in cooingmarlinz3n npm...
EUVD-2025-105143
Malicious code in futuremarlinz3n npm...
MAL-2025-120160 Malicious code in future_marlin_z3n (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7df970edf5ba0c7211cac3bc6b188612521a51c3b1c18e6f180c51e34e330c91 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...