CVE-2020-27661

A divide-by-zero issue was found in dwc2handlepacket in hw/usb/hcd-dwc2.c in the hcd-dwc2 USB host controller emulation of QEMU. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service...

QEMU 数字错误漏洞

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. A code issue vulnerability exists in QEMU, which stems from a found a division by zero issue in the dwc2handlepacket handler package in the...

Denial Of Service (DoS)

A divide-by-zero flaw was found in QEMU in the dwc-hsotg dwc2 USB host controller emulation. More specifically, HCCHARMPS was read from a device register and later used as a divisor without performing a sanity check. This flaw allows a malicious or buggy guest to crash the QEMU process on the hos...

CVE-2020-27661

A divide-by-zero flaw was found in QEMU in the dwc-hsotg dwc2 USB host controller emulation. More specifically, HCCHARMPS was read from a device register and later used as a divisor without performing a sanity check. This flaw allows a malicious or buggy guest to crash the QEMU process on the hos...

PT-2020-6461

Name of the Vulnerable Software and Affected Versions QEMU version 5.0.0 Description The issue is related to the hw/usb/hcd-ohci.c component in the QEMU hardware emulator, which can lead to an infinite loop when a TD list has a loop. This can cause a denial of service. Recommendations For QEMU...

CVE-2019-18830

Barco ClickShare Button R9861500D01 devices before 1.9.0 allow OS Command Injection. The embedded 'donglebridge' program used to expose the functionalities of the ClickShare Button to a USB host, is vulnerable to OS command injection vulnerabilities. These vulnerabilities could lead to code...

Qemu: usb: xHCI: infinite loop vulnerability in xhci_ring_fetch

The xhciringfetch function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service infinite loop and QEMU process crash by leveraging failure to limit the number of link Transfer Request Blocks TRB to process...

UBUNTU-CVE-2017-9330

QEMU aka Quick Emulator before 2.9.0, when built with the USB OHCI Emulation support, allows local guest OS users to cause a denial of service infinite loop by leveraging an incorrect return value, a different vulnerability than CVE-2017-6505...

DEBIAN-CVE-2017-5973

The xhcikickepctx function in hw/usb/hcd-xhci.c in QEMU aka Quick Emulator allows local guest OS privileged users to cause a denial of service infinite loop and QEMU process crash via vectors related to control transfer descriptor sequence...

ALPINE-CVE-2016-7995

Memory leak in the ehciprocessitd function in hw/usb/hcd-ehci.c in QEMU aka Quick Emulator allows local guest OS administrators to cause a denial of service memory consumption via a large number of crafted buffer page select PG indexes...

USB Host Diagnostics - External URLs, Native code usage, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application USB Host Diagnostics published at the 'play' market has multiple vulnerabilities...

QEMU 'hw/usb/hcd-ohci.c' Denial of Service Vulnerability

QEMU is a suite of analog processor software. A security vulnerability in QEMU 'hw/usb/hcd-ohci.c' allows attackers to exploit the vulnerability to crash the QEMU process and cause a denial of service...

CVE-2014-1287

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption via crafted USB messages...

CVE-2014-1287

USB Host in Apple iOS before 7.1 and Apple TV before 6.1 allows physically proximate attackers to execute arbitrary code or cause a denial of service memory corruption via crafted USB messages...

CVE-2014-1287

CVE-2014-1287 affects Apple devices via USB Host: in iOS versions before 7.1 and Apple TV before 6.1, sending crafted USB messages to a HID device can cause kernel memory corruption, potentially enabling arbitrary code execution or a reboot. The vulnerability is tied to the kernel panic path when...

Apple iOS < 7.1 Multiple Vulnerabilities

Binary data 8155.prm...

Apple iOS < 7.1 Multiple Vulnerabilities

Binary data appleios71check.nbin...

Code injection

The Bluetooth USB host controller in Apple Mac OS X before 10.9 prematurely deletes interfaces, which allows local users to cause a denial of service system crash via a crafted application...