CVE-2021-22636: Integer Overflow or Wraparound

Texas Instruments TI-RTOS, when configured to use HeapMem heapdefault, malloc returns a valid pointer to a small buffer on extremely large values, which can trigger an integer overflow vulnerability in 'HeapMemallocUnprotected' and result in code execution...

PT-2023-7501 · Microsoft · Azure Rtos Netx Duo

Name of the Vulnerable Software and Affected Versions: Azure RTOS NetX Duo versions 6.2.1 and below Description: The issue is related to a memory overflow vulnerability in the Azure RTOS NetX Duo TCP/IP network stack, which can be exploited by an attacker to achieve remote code execution. The...

PT-2023-7500

Name of the Vulnerable Software and Affected Versions Azure RTOS USBX versions prior to 6.3.0 Description The issue is related to expired pointer dereference vulnerabilities in Azure RTOS USBX, which can lead to remote code execution. The affected components include functions and processes in the...

Weston Embedded uC-HTTP HTTP Server out-of-bounds write vulnerability

Talos Vulnerability Report TALOS-2023-1725 Weston Embedded uC-HTTP HTTP Server out-of-bounds write vulnerability November 14, 2023 CVE Number CVE-2023-24585 SUMMARY An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01. A specially crafte...

Weston Embedded uC-HTTP HTTP Server memory corruption vulnerability

Talos Vulnerability Report TALOS-2023-1732 Weston Embedded uC-HTTP HTTP Server memory corruption vulnerability November 14, 2023 CVE Number CVE-2023-28391 SUMMARY A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01. Speciall...

The vulnerability of the Azure RTOS GUIX Studio development environment, related to insufficient validation of input data, allows a perpetrator to execute arbitrary code.

The vulnerability of the Azure RTOS GUIX Studio development environment is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

CVE-2023-36418

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

Remote code execution

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

CVE-2023-36418 Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

CVE-2023-36418 Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

CVE-2023-36418

CVE-2023-36418 affects Microsoft Azure RTOS GUIX Studio and GUIX Studio Installer Application. A remote code execution vulnerability is reported, with CVSSv3.1 base score 7.8 (LOCAL attack vector, low complexity, user interaction required, no privileges needed; impacts on confidentiality, integri...

Azure RTOS GUIX Studio Remote Code Execution Vulnerability

...

Microsoft Azure RTOS GUIX Studio Multiple Vulnerabilities (October 2023)

The Microsoft Azure RTOS GUIX Studio app installed on the remote host is missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...

CVE-2023-36418: Double Free

Azure RTOS GUIX Studio Remote Code Execution Vulnerability...

KLA61357 Multiple vulnerabilities in Microsoft Azure

Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to execute arbitrary code, gain privileges. Below is a complete list of vulnerabilities: 1. A remote code execution vulnerability in Azure Identity SDK can be exploited remotely to execute...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by Zephyr. A security vulnerability exists in Zephyr IPM that stems from the presence of a buffer overflow issue...

CVE-2023-4265

CVE-2023-4265 concerns potential buffer overflow vulnerabilities in Zephyr RTOS USB code. Affected areas include usb_dc_native_posix.c (Linux/Posix USB device driver) at a cited line and subsys/usb/device/class/netusb/function_rndis.c at another line. The issue is described across multiple source...

Zephyr 缓冲区错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.3 and earlier versions that stems from not clearing global references to semaphores after synchronously sending HCI commands, which could allow a malicious HCI...

The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks allows attackers to trigger service failures or gain access to confidential information.

The vulnerability of the IKE protocol implementation in real-time operating systems like Wind River VxWorks relates to reading beyond the boundary. Exploiting this vulnerability can allow a malicious actor to cause service failures or gain access to confidential information...