CVE-2023-7152

A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function pollsetaddfd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclosed to the public and may be used. The...

CVE-2023-7158

A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function sliceindices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2023-7158: Heap-based Buffer Overflow

A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function sliceindices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

MicroPython Security Vulnerabilities

MicroPython is a small open source Python programming language interpreter open-sourced by MicroPython. A security vulnerability exists in MicroPython 1.21.0 and earlier versions, which stems from a function sliceindices in the file objslice.c that causes a heap-based buffer overflow...

PT-2023-32911 · Unknown · Micropython

Name of the Vulnerable Software and Affected Versions: MicroPython versions 1.21.0 through 1.22.0-preview Description: A critical issue has been found in the function poll set add fd of the file extmod/modselect.c, leading to use after free. The exploit has been disclosed to the public and may be...

OPENSUSE-SU-2022:10183-1 Security update for pyenv

This update for pyenv fixes the following issues: Update to 2.3.5 - Add CPython 3.10.7 by @edgarrmondragon in 2454 - Docs: update Fish PATH update by @gregorias in 2449 - Add CPython 3.7.14, 3.8.14 and 3.9.14 by @edgarrmondragon in 2456 - Update miniconda3-3.9-4.12.0 by @Tsuki in 2460 - Add CPyth...

Security update for pyenv (moderate)

openSUSE Security Update: Security update for pyenv Announcement ID: openSUSE-SU-2022:10183-1 Rating: moderate References: 1201582 Cross-References: CVE-2022-35861 CVSS scores: CVE-2022-35861 NVD : 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Affected Products: openSUSE Backports SLE-15-SP4 A...

CVE-2021-42553

A buffer overflow vulnerability in stm32mwusbhost of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBHMAXNUMENDPOINTS. The library is typically integrated when using a RTOS such as FreeRTOS on STM32 MCUs...

MAL-2022-433 Malicious code in @micropython/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d60cc11be7eba3c3a3dae9ac1729ef98bacdf43f44f7c29fde0de4b212965f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @micropython/fetlife-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c5d60cc11be7eba3c3a3dae9ac1729ef98bacdf43f44f7c29fde0de4b212965f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...