Submit #409312: micropython v1.23.0 Heap-based Buffer Overflowinfo

Titlemicropython v1.23.0 Heap-based Buffer Overflow
DescriptionIn the VFS unmount process, the comparison between the mounted path string and the unmount requested string is based solely on the length of the unmount string, which can lead to a heap buffer overflow read.
Source⚠️ https://github.com/micropython/micropython/issues/13006
User
 qbit (UID 60633)
Submission09/17/2024 05:52 (2 years ago)
Moderation09/17/2024 14:47 (9 hours later)
StatusAccepted
VulDB entry277764 [MicroPython 1.23.0 VFS Unmount extmod/vfs.c mp_vfs_umount heap-based overflow]
Points16

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!