| शीर्षक | uYanki board-stm32f103rc-berial 0.0 Buffer Overflow |
|---|
| विवरण | The function heartrate1_i2c_hal_write() contains a stack-based buffer overflow vulnerability (CWE-787). It copies num + 1 bytes of data into a fixed-size buffer buffer[MAX_READ_SIZE] without verifying if num + 1 exceeds the buffer's capacity. An attacker could exploit this by providing a large num value, leading to arbitrary code execution, system crash, or unauthorized access.
More details: https://github.com/uYanki/board-stm32f103rc-berial/issues/3 |
|---|
| स्रोत | ⚠️ https://github.com/uYanki/board-stm32f103rc-berial/issues/3 |
|---|
| उपयोगकर्ता | ybdesire (UID 83239) |
|---|
| सबमिशन | 31/05/2025 03:15 PM (1 वर्ष पहले) |
|---|
| संयम | 15/06/2025 08:47 AM (15 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 312562 [uYanki board-stm32f103rc-berial तक 84daed541609cb7b46854cc6672a275d1007e295 heartrate1_hal.c heartrate1_i2c_hal_write num बफ़र ओवरफ़्लो] |
|---|
| अंक | 20 |
|---|