Heap-Based Buffer Overflow

MicroPython is vulnerable to a Heap-based buffer overflow. The vulnerability is due to improper string length comparison during the VFS unmount process in the mpvfsumount function, which allows a remote attacker to trigger a heap buffer overflow read by supplying a crafted unmount path...

CVE-2024-8946: Heap-based Buffer Overflow

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mpvfsumount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit...