Search CVE reports


Toggle filters

1 – 4 of 4 results


CVE-2024-8948

Medium priority
Needs evaluation

A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be...

1 affected package

micropython

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
micropython Needs evaluation Needs evaluation Ignored
Show less packages

CVE-2024-8947

Medium priority
Fixed

A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be...

1 affected package

micropython

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
micropython Fixed Fixed Fixed
Show less packages

CVE-2024-8946

Medium priority
Fixed

A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer...

1 affected package

micropython

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
micropython Fixed Fixed Fixed
Show less packages

CVE-2021-42553

Medium priority

Some fixes available 4 of 8

A buffer overflow vulnerability in stm32_mw_usb_host of STMicroelectronics in versions before 3.5.1 allows an attacker to execute arbitrary code when the descriptor contains more endpoints than USBH_MAX_NUM_ENDPOINTS. The library...

1 affected package

micropython

Package 24.04 LTS 22.04 LTS 20.04 LTS 18.04 LTS
micropython Fixed Fixed Fixed Not in release
Show less packages