CVE-2019-16128

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 1 of 2...

CVE-2019-16129

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow issue 2 of 2...

CVE-2019-16129

The CVE-2019-16129 issue affects Microchip CryptoAuthentication Library (CryptoAuthLib). Multiple sources confirm a buffer overflow in CryptoAuthLib versions prior to 20191122, caused by unsafe handling that can lead to memory corruption (impacting confidentiality, integrity, and availability per...

Rexchip Chips with Out-of-Bounds Read Vulnerability

With a R&D team specializing in system-on-chip design and algorithm research, Rexchip Microelectronics Corporation provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control and other fields. An out-of-bounds re...

GHSA-F366-4RVV-95X2 Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration

Impact 1 If an application is making use of the deprecated kit protocol HALs as the communication channel to the target device an attacker can masquerade as a device and return malformed packets of arbitrary length which the protocol stack will write to the stack. HALs intended for production use...

Buffer overflow in deprecated USB HALs and stack overflow in USB enumeration

Impact 1 If an application is making use of the deprecated kit protocol HALs as the communication channel to the target device an attacker can masquerade as a device and return malformed packets of arbitrary length which the protocol stack will write to the stack. HALs intended for production use...

Binary Vulnerability in Rexchip Microelectronics Corporation's Rexchip Chip

Focusing on mobile Internet and digital multimedia chip design, Rexchip is a professional SOC solution provider for personal mobile information terminals. A binary vulnerability exists in Rexchip Microelectronics Corporation's Rexchip microchip, which can be exploited by attackers to launch...

CVE-2020-12789

The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets...

CVE-2020-12787

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling...

CVE-2020-12788

CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks...

Code injection

CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks...

Hardcoded credentials

The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets...

Design/Logic Flaw

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling...

CVE-2020-12789

The Secure Monitor in Microchip Atmel ATSAMA5 products use a hardcoded key to encrypt and authenticate secure applets...

CVE-2020-12789

The CVE-2020-12789 entry concerns the Secure Monitor in Microchip Atmel ATSAMA5 devices, where a hardcoded key is used to encrypt and authenticate secure applets. Connected sources confirm the vulnerable component (Secure Monitor) and the root cause (hardcoded key), with CVSS v3.1 base score 7.5 ...

CVE-2020-12788

CMAC verification functionality in Microchip Atmel ATSAMA5 products is vulnerable to vulnerable to timing and power analysis attacks...

CVE-2020-12788

The CVE concerns CMAC verification in Microchip Atmel ATSAMA5 products. The issue stems from side-channel weaknesses (timing and power analysis) during CMAC verification, which could potentially expose sensitive information. Connected documents reiterate the affected target as ATSAMA5, but do not...

CVE-2020-12787

The CVE-2020-12787 entry concerns Microchip Atmel ATSAMA5 products in Secure Mode where an attacker can bypass applet handling security mechanisms. Connected sources corroborate the issue across Red Hat advisory and NVD entries, indicating the vulnerability affects ATSAMA5 SoCs operating in Secur...

CVE-2020-12787

Microchip Atmel ATSAMA5 products in Secure Mode allow an attacker to bypass existing security mechanisms related to applet handling...

Stack Overflow Vulnerability in Rexchip Microelectronics Corporation's Rexchip Microchip

Rexchip Microelectronics has a R&D team specializing in system-on-chip design and algorithm research, and provides professional chip solutions for high-end intelligent hardware, cell phone peripherals, tablet PCs, TV set-top boxes, industrial control, and many other fields. Rexchip Microelectroni...