Поиск уязвимостей
Количество 10
Количество 10
GHSA-fh6g-r8pf-wqgw
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service.
CVE-2026-47104
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service.
CVE-2026-47104
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service.
CVE-2026-47104
libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service.
CVE-2026-47104
libusb < 1.0.30 Out-of-Bounds Read in parse_iad_array()
CVE-2026-47104
libusb before version 1.0.30 contains a one-byte out-of-bounds read vu ...
ROS-20260921-80-0135
Уязвимость libusbx
ROS-20260921-73-0107
Уязвимость libusbx
openSUSE-SU-2026:21783-1
Security update for libusb-1_0
ALT-PU-2026-12498
ALT-PU-2026-12498: package `libusb` update to version 1.0.30-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| GHSA-fh6g-r8pf-wqgw libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service. | CVSS3: 4 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-47104 libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service. | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-47104 libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service. | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-47104 libusb before version 1.0.30 contains a one-byte out-of-bounds read vulnerability in parse_iad_array() in descriptor.c that allows attackers to trigger a denial of service by supplying a malformed USB descriptor whose bLength equals size minus one, causing the bounds check to use the original buffer size instead of the remaining size. Attackers in virtualized environments with USB passthrough can supply crafted descriptors through libusb_get_active_interface_association_descriptors or libusb_get_interface_association_descriptors to read one byte past the end of the malloc allocation, resulting in a denial of service. | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
 | CVE-2026-47104 libusb < 1.0.30 Out-of-Bounds Read in parse_iad_array() | 0% Низкий | 6 месяцев назад | |
| CVE-2026-47104 libusb before version 1.0.30 contains a one-byte out-of-bounds read vu ... | CVSS3: 5.5 | 0% Низкий | 6 месяцев назад |
 | ROS-20260921-80-0135 Уязвимость libusbx | CVSS3: 4 | 0% Низкий | около 2 месяцев назад |
| ROS-20260921-73-0107 Уязвимость libusbx | CVSS3: 4 | 0% Низкий | около 2 месяцев назад |
 | openSUSE-SU-2026:21783-1 Security update for libusb-1_0 | 2 месяца назад | ||
| ALT-PU-2026-12498 ALT-PU-2026-12498: package `libusb` update to version 1.0.30-alt1 | CVSS3: 5.5 | 3 месяца назад |
Уязвимостей на страницу