1018 matches found
CVE-2024-1642470
Windows USB Generic Parent Driver Remote Code Execution Vulnerability CVE-2024-1642470 Overview This repository contains a proof-of-concept PoC exploit code and a detection script for the Windows USB Generic Parent Driver Remote Code Execution Vulnerability, identified as CVE-2024-1642470...
CVE-2026-80973 ALSA: 6fire: bound the MIDI event length from the device
In the Linux kernel, the following vulnerability has been resolved: ALSA: 6fire: bound the MIDI event length from the device usb6firecommreceiverhandler forwards a MIDI event using a length byte the device supplies, with no bound and no check that the transfer delivered that many bytes: if...
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()
A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...
kernel: USB: serial: io_ti: fix heap overflow in get_manuf_info()
A flaw was found in the Linux kernel's ioti USB serial driver. A malicious USB device, when plugged into a host running this driver, can exploit a heap overflow vulnerability in the getmanufinfo function. This occurs because the driver does not properly validate the size of data read from the...
The vulnerability of the omninet_port_remove() function in the drivers/usb/serial/omninet.c module of the Linux device driver for USB devices allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the omninetportremove function in the drivers/usb/serial/omninet.c module of the Linux device driver for USB devices is related to the occurrence of operations outside the buffer in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentialit...
The vulnerability of the mxuport_calc_num_ports() function in the drivers/usb/serial/mxuport.c module of the Linux operating system’s USB device driver framework allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the mxuportcalcnumports function in the drivers/usb/serial/mxuport.c module of the Linux device driver framework is related to the copying of buffers without checking input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrit...
CVE-2019-14079
USB device fuzzing on Android CVE-2019-14079 This blog post is about a simple bug I found in my android deviceMI A2 - runs stock android using USB device fuzzing and was marked as high severity by google. The bug was in Qualcomm USB driver which was later patched and disclosed in March 2020 Andro...
CVE-2026-72953
Heap-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-69527
Out-of-bounds read in Windows USB Mass Storage Class Driver allows an authorized attacker to disclose information locally...
CVE-2026-69503
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69307
Heap-based buffer overflow in Windows USB Audio Class driver usbaudio.sys allows an authorized attacker to elevate privileges locally...
CVE-2026-69295
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-68840
Concurrent execution using shared resource with improper synchronization 'race condition' in Windows USB Driver allows an authorized attacker to elevate privileges locally...
CVE-2026-72953
CVE-2026-72953 is a heap-based buffer overflow in the Windows USB Driver that allows an authorized attacker to achieve local privilege escalation . The flaw is rated CVSS 3.1 7.8 (High) with vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating that low-privilege local access is sufficient to co...
EUVD-2026-73528
Stack-based buffer overflow in Windows USB Driver allows an authorized attacker to elevate privileges over a network...
CVE-2026-69503
CVE-2026-69503 is a stack-based buffer overflow in the Windows USB Driver that allows an authorized attacker to elevate privileges over a network. The vulnerability carries a CVSS 3.1 base score of 8.0 (HIGH) with a network attack vector, low complexity, low required privileges, and required user...
CVE-2026-69295
CVE-2026-69295 is an out-of-bounds read in the Windows USB Driver that allows an authorized local attacker to escalate privileges. The flaw yields high impact across confidentiality, integrity, and availability (CVSS 3.1 score 7.8 HIGH , vector AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), meaning a low-...
EUVD-2026-73435
Out-of-bounds read in Windows USB Driver allows an authorized attacker to elevate privileges locally...