CyberSecBulletin

MicroPython vulnerabilities

We track 5 vulnerabilities in MicroPython products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on September 17, 2024.

5vulnerabilities
2critical
3high
0exploited
8.5average CVSS score

Latest MicroPython vulnerabilities

  • 7.5 High severity

    MicroPython: Out-of-bounds Write

    CVE-2024-8948MicroPython

    A vulnerability was found in MicroPython 1.23.0. It has been rated as critical. Affected by this issue is the function mpz_as_bytes of the file py/objint.c. The manipulation leads to heap-based buffer overflow. The attack may be launched remotely. The exploit

  • 8.1 High severity

    MicroPython: Use After Free

    CVE-2024-8947MicroPythonEPSS 1.02%

    A vulnerability was found in MicroPython 1.22.2. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file py/objarray.c. The manipulation leads to use after free. The attack can be launched remotely. The complexi

  • 7.5 High severity

    MicroPython: Out-of-bounds Write

    CVE-2024-8946MicroPythonEPSS 1.01%

    A vulnerability was found in MicroPython 1.23.0. It has been classified as critical. Affected is the function mp_vfs_umount of the file extmod/vfs.c of the component VFS Unmount Handler. The manipulation leads to heap-based buffer overflow. It is possible to l

  • 9.8 Critical severity

    MicroPython: Out-of-bounds Write

    CVE-2023-7158MicroPythonEPSS 1.23%

    A vulnerability was found in MicroPython up to 1.21.0. It has been classified as critical. Affected is the function slice_indices of the file objslice.c. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack remotely. The ex

  • 9.8 Critical severity

    MicroPython: Use After Free

    CVE-2023-7152MicroPython

    A vulnerability, which was classified as critical, has been found in MicroPython 1.21.0/1.22.0-preview. Affected by this issue is the function poll_set_add_fd of the file extmod/modselect.c. The manipulation leads to use after free. The exploit has been disclo