إرسال #259236: micropython micropython v1.13 to v1.21.0 buffer overflowالمعلومات

عنوانmicropython micropython v1.13 to v1.21.0 buffer overflow
الوصفslice_indices misinterprets the float value as an integer value, which leads to a buffer overflow of the target array. it can be used as an attack vector to read and write the contents over the array (to the chunk placed after the array).
المصدر⚠️ https://github.com/micropython/micropython/issues/13007
المستخدم
 qbit (UID 60633)
ارسال28/12/2023 08:54 AM (3 سنوات منذ)
الاعتدال28/12/2023 03:29 PM (7 hours later)
الحالةتمت الموافقة
إدخال VulDB249180 [MicroPython حتى 1.21.0 objslice.c slice_indices تلف الذاكرة]
النقاط17

Interested in the pricing of exploits?

See the underground prices here!