Skip to content
CVE PROGRAM SOURCE RECORD8.1 High

CVE-2020-10019

Buffer Overflow in USB DFU requested length

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
zephyr

Description

USB DFU has a potential buffer overflow where the requested length (wLength) is not checked against the buffer size. This could be used by a malicious USB host to exploit the buffer overflow. See NCC-ZEP-002 This issue affects: zephyrproject-rtos zephyr version 1.14.1 and later versions. version 2.1.0 and later versions.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

zephyrproject-rtos zephyr

  • 1.14.1 to < unspecifiedaffected
  • 2.1.0 to < unspecifiedaffected

References