usbx vulnerabilities

10 known vulnerabilities in usbx from Azure-rtos. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  usbx: Improper Check for Unusual or Exceptional Conditions

  CVE-2023-48698Dec 5, 2023Azure-rtos

  Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected compone

• 9.8 Critical severity

  usbx: NULL Pointer Dereference

  CVE-2023-48697Dec 5, 2023Azure-rtosEPSS 1.19%

  Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected component

• 9.8 Critical severity

  usbx: Improper Check for Unusual or Exceptional Conditions

  CVE-2023-48696Dec 5, 2023Azure-rtos

  Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference vulnerabilities in Azure RTOS USBX. The affected compone

• 9.8 Critical severity

  usbx: Out-of-bounds Write

  CVE-2023-48695Dec 5, 2023Azure-rtosEPSS 1.23%

  Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write vulnerabilities in Azure RTOS USBX. The affected components incl

• 9.8 Critical severity

  usbx: Expired Pointer Dereference

  CVE-2023-48694Dec 5, 2023Azure-rtosEPSS 1.33%

  Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer dereference and type confusion vulnerabilities in Azure RTOS USBX. T

• 9.8 Critical severity

  usbx: Buffer Copy without Checking Size of Input

  CVE-2022-39344Nov 4, 2022Azure-rtosEPSS 2.66%

  Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. Prior to version 6.1.12, the USB DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memo

• 9.8 Critical severity

  usbx: Integer Underflow (Wrap or Wraparound)

  CVE-2022-39293Oct 13, 2022Azure-rtos

  Azure RTOS USBX is a high-performance USB host, device, and on-the-go (OTG) embedded stack, that is fully integrated with Azure RTOS ThreadX. The case is, in [_ux_host_class_pima_read](https://github.com/azure-rtos/usbx/blob/master/common/usbx_host_classes/src

• 9.8 Critical severity

  usbx: Improper Validation of Specified Quantity in Input

  CVE-2022-36063Oct 10, 2022Azure-rtosEPSS 2.17%

  Azure RTOS USBx is a USB host, device, and on-the-go (OTG) embedded stack, fully integrated with Azure RTOS ThreadX and available for all Azure RTOS ThreadX–supported processors. Azure RTOS USBX implementation of host support for USB CDC ECM includes an intege

• 9.8 Critical severity

  usbx: Buffer Copy without Checking Size of Input

  CVE-2022-29246May 24, 2022Azure-rtosEPSS 2.42%

  Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack. Prior to version 6.1.11, he USBX DFU UPLOAD functionality may be utilized to introduce a buffer overflow resulting in overwrite of memory contents. In particular cases this may allow an

• 9.8 Critical severity

  usbx: Buffer Copy without Checking Size of Input

  CVE-2022-29223May 24, 2022Azure-rtosEPSS 1.23%

  Azure RTOS USBX is a USB host, device, and on-the-go (OTG) embedded stack. In versions prior to 6.1.10, an attacker can cause a buffer overflow by providing the Azure RTOS USBX host stack a HUB descriptor with `bNbPorts` set to a value greater than `UX_MAX_TT`