Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-vxch-4r45-jhw9

Опубликовано: 20 апр. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the function returns, interrupt service routines may dereference this dangling pointer, resulting in memory corruption.

A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the function returns, interrupt service routines may dereference this dangling pointer, resulting in memory corruption.

EPSS

Процентиль: 8%
0.00179
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-562
CWE-825

Связанные уязвимости

CVSS3: 5.3
ubuntu
5 месяцев назад

A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the function returns, interrupt service routines may dereference this dangling pointer, resulting in memory corruption.

CVSS3: 5.3
nvd
5 месяцев назад

A stack-use-after-return issue exists in the Arduino_Core_STM32 library prior to version 1.7.0. The pwm_start() function allocates a TIM_HandleTypeDef structure on the stack and passes its address to HAL initialization routines, where it is stored in a global timer handle registry. After the function returns, interrupt service routines may dereference this dangling pointer, resulting in memory corruption.

EPSS

Процентиль: 8%
0.00179
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-562
CWE-825