zephyr_cve-2021-3625

CVE-2021-3625 This repository contains a few example exploits for CVE-2021-3625. All Zephyr-based usb devices up to and including version 2.5.0 suffer from a buffer overflow allowing readout of up to 65kB. Depending on the actual device this may result of leakage of sensitive data like encryption...

CVE-2020-13464

CVE-2020-13464 affects China Key Systems & Integrated Circuit CKS32F103 devices. The vulnerability is in the flash memory readout protection, allowing a physical attacker to extract firmware through the debug interface by leveraging the CPU or DMA module. Impact stated in sources is firmware disc...

CVE-2020-13472: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32F103 devices allows physical attackers to extract firmware via the debug interface by utilizing the DMA module...

CVE-2020-13469: Exposure of Resource to Wrong Sphere

The flash memory readout protection in Gigadevice GD32VF103 devices allows physical attackers to extract firmware via the debug interface by utilizing the CPU...

CVE-2020-13467: Improper Handling of Exceptional Conditions

The flash memory readout protection in China Key Systems & Integrated Circuit CKS32F103 devices allows physical attackers to extract firmware via the debug interface and exception handling...

PT-2020-13559

Name of the Vulnerable Software and Affected Versions Gigadevice GD32F103 devices affected versions not specified Description The issue concerns the flash memory readout protection in Gigadevice GD32F103 devices, which can be exploited by physical attackers to extract firmware. This is achieved b...

CVE-2019-3812

QEMU, through version 2.10 and through version 3.1.0, is vulnerable to an out-of-bounds read of up to 128 bytes in the hw/i2c/i2c-ddc.c:i2cddc function. A local attacker with permission to execute i2c commands could exploit this to read stack memory of the qemu process on the host...

Memory Read Out-of-Bounds Vulnerability in TAS TP03-Software V21

The TP03-Software V21 is a programmable controller. A memory read out-of-bounds vulnerability exists in TP03-Software V21. The vulnerability is caused due to TP03-Software failing to validate the availability of a function's pointer when reading a malformed project, which can be exploited by an...