إرسال #259236: micropython micropython v1.13 to v1.21.0 buffer overflowالمعلومات

عنوانmicropython micropython v1.13 to v1.21.0 buffer overflow
الوصفslice_indices misinterprets the float value as an integer value, which leads to a buffer overflow of the target array. it can be used as an attack vector to read and write the contents over the array (to the chunk placed after the array).
المصدر⚠️ https://github.com/micropython/micropython/issues/13007
المستخدم
 qbit (UID 60633)
ارسال28/12/2023 08:54 AM (2 سنوات منذ)
الاعتدال28/12/2023 03:29 PM (7 hours later)
الحالةتمت الموافقة
إدخال VulDB249180 [MicroPython حتى 1.21.0 objslice.c slice_indices تلف الذاكرة]
النقاط17

Do you want to use VulDB in your project?

Use the official API to access entries easily!