PT-2020-11862
CVE-2020-10019
·
Published
2020-05-11
·
Updated
2020-06-05
Description by
CVSS 3.1
8.1
HighMetricsAV:L/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
zephyr versions 1.14.1 through 2.1.0 and later versions.
Description
The issue is related to a potential buffer overflow in USB DFU where the requested length is not checked against the buffer size. This could be exploited by a malicious USB host.
Recommendations
For zephyr versions 1.14.1 through 2.1.0 and later versions, at the moment, there is no information about a newer version that contains a fix for this issue.
Found an issue in the description? Have something to add? Feel free to write us 👾