zephyr_cve-2021-3625

CVE-2021-3625 Этот репозиторий содержит несколько примеров эксплойтов для CVE-2021-3625. Все USB-устройства на базе Zephyr до версии 2.5.0 включительно страдают от переполнения буфера, позволяющего считывать до 65 кБ. В зависимости от конкретного устройства это может привести к утечке...

android-gadget

android-gadget Résumé Certaines révisions du noyau Linux utilisé dans Android sont affectées par le problème CVE-2021-39685. Des informations détaillées et une POC pour CVE-2021-39685 peuvent être trouvées dans le dépôt inspector-gadget. Ce dépôt inclut une POC ciblant quelques gadgets USB...

PT-2026-70063

Name of the Vulnerable Software and Affected Versions Zephyr affected versions not specified Description An out-of-bounds write exists in the USB device-side CDC NCM class control-to-host handler usbd cdc ncm cth within the subsys/usb/device next/class/usbd cdc ncm.c file. The issue occurs when t...

UBUNTU-CVE-2026-46146

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...

CVE-2026-46146

In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Avoid potential endless loop in convertchmapv3 The convertchmapv3 has a loop with its increment size of csdesc-wLength, but we forgot to validate csdesc-wLength itself, which may lead to potential endless loop by...

Nxp Semiconductors Nxp Kinetis K82 缓冲区错误漏洞

The Nxp Semiconductors Nxp Kinetis K82 is a microcontroller from Nxp Semiconductors of the Netherlands. A security vulnerability exists in the Nxp Semiconductors NXP Kinetis K82, which arises from the device having a buffer reread via a carefully crafted wlength value in a GET Status-Other reques...