| 제목 | uYanki board-stm32f103rc-berial 0.0 Buffer Overflow |
|---|
| 설명 | The function heartrate1_i2c_hal_write() contains a stack-based buffer overflow vulnerability (CWE-787). It copies num + 1 bytes of data into a fixed-size buffer buffer[MAX_READ_SIZE] without verifying if num + 1 exceeds the buffer's capacity. An attacker could exploit this by providing a large num value, leading to arbitrary code execution, system crash, or unauthorized access.
More details: https://github.com/uYanki/board-stm32f103rc-berial/issues/3 |
|---|
| 원천 | ⚠️ https://github.com/uYanki/board-stm32f103rc-berial/issues/3 |
|---|
| 사용자 | ybdesire (UID 83239) |
|---|
| 제출 | 2025. 05. 31. PM 03:15 (1 년도 ago) |
|---|
| 모더레이션 | 2025. 06. 15. AM 08:47 (15 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 312562 [uYanki board-stm32f103rc-berial 까지 84daed541609cb7b46854cc6672a275d1007e295 heartrate1_hal.c heartrate1_i2c_hal_write num 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|