Elttam

**Name of the Vulnerable Software and Affected Versions** ESP-IDF versions prior to 4.4.7 ESP-IDF versions prior to 5.2.1 **Description** A Time-of-Check to Time-of-Use (TOCTOU) vulnerability was discovered in the implementation of the ESP-IDF bootloader, which could allow an attacker with physical access to flash of the device to bypass anti-rollback protection. This attack can allow booting past a partition with a lower security version, even in the presence of a flash encryption scheme. The vulnerability requires carefully modifying the flash contents after the anti-rollback checks have been performed by the bootloader. **Recommendations** For ESP-IDF versions prior to 4.4.7, update to version 4.4.7 or later. For ESP-IDF versions prior to 5.2.1, update to version 5.2.1 or later.

**Name of the Vulnerable Software and Affected Versions** STMicroelectronics STSAFE-A1xx versions prior to 3.3.7 X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications version 1.2.0 **Description** The issue allows MCU code execution if an adversary has the ability to read from and write to the I2C bus. This is caused by an `StSafeA ReceiveBytes` buffer overflow in the X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications, and thus can affect user-written code that was derived from a published sample application. **Recommendations** For STMicroelectronics STSAFE-A1xx versions prior to 3.3.7, update to version 3.3.7 or later to resolve the issue. For X-CUBE-SAFEA1 Software Package for STSAFE-A sample applications version 1.2.0, consider disabling the `StSafeA ReceiveBytes` function until a patch is available. As a temporary workaround, restrict access to the I2C bus to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Apache Guacamole versions 1.5.3 and older **Description** The issue arises from inconsistent handling of values received from a VNC server, which can lead to integer overflow. If a user connects to a malicious or compromised VNC server, specially-crafted data could result in memory corruption, possibly allowing arbitrary code to be executed with the privileges of the running guacd process. Approximately 29,620 results are mainly distributed in the United States, Germany, and other countries. **Recommendations** For Apache Guacamole versions 1.5.3 and older, upgrade to version 1.5.4, which fixes this issue. As a temporary workaround, consider restricting access to the VNC server to minimize the risk of exploitation. Avoid using potentially malicious or compromised VNC servers until the issue is resolved.

**Name of the Vulnerable Software and Affected Versions** Libksba versions prior to 1.6.3 **Description** The issue is related to an integer overflow vulnerability in the CRL signature parser. This vulnerability can be exploited by a remote attacker to send specially crafted data to the application, causing an integer overflow and potentially allowing the execution of arbitrary code on the target system. **Recommendations** For versions prior to 1.6.3, update to version 1.6.3 or later to resolve the issue. As a temporary workaround, consider restricting the use of the CRL signature parser until a patch is available.