Security

Report a vulnerability

SECURITY.md

Security Policy

Supported Versions

Version	Supported
6.4.x	✅

Reporting a Vulnerability

If you think you have found a vulnerability in you can report it using one of the following ways:

Contact the Eclipse Foundation Security Team
Report a Vulnerability

You can find more information about reporting and disclosure at the Eclipse Foundation Security page.

Security Policy

This project follows Eclipse Foundation Vulnerability Reporting Policy.

Azure RTOS USBX Remote Code Execution Vulnerability
GHSA-qjw8-7w86-44qj published Dec 3, 2023 by rkolandaivel

Moderate
Azure RTOS USBX Remote Code Execution Vulnerability
GHSA-mwj9-rpph-v8wc published Dec 3, 2023 by rkolandaivel

High
Azure RTOS USBX Remote Code Execution Vulnerability
GHSA-h733-98hq-f884 published Dec 3, 2023 by rkolandaivel

Moderate
Azure RTOS USBX Remote Code Execution Vulnerability
GHSA-p2p9-wp2q-wjv4 published Dec 3, 2023 by rkolandaivel

Moderate
Azure RTOS USBX Remote Code Execution Vulnerability
GHSA-grhp-f66q-x857 published Dec 3, 2023 by rkolandaivel

Moderate
DFU UPLOAD buffer overflow revised
GHSA-m9p8-xrp7-vvqp published Nov 3, 2022 by liydu

High
Azure RTOS USBX Host PIMA read integer underflow with buffer overflow
GHSA-gg76-h537-xq48 published Oct 12, 2022 by liydu

High
USBX Host CDC ECD integer underflow with buffer overflow
GHSA-chpp-5fv9-6368 published Oct 10, 2022 by liydu

Moderate
Potential buffer overflow in function DFU upload
GHSA-hh5p-x584-j8hv published May 23, 2022 by liydu

High
Potential buffer overflow on HUB descriptor
GHSA-2qc5-385m-x862 published May 17, 2022 by liydu

High

Learn more about advisories related to eclipse-threadx/usbx in the GitHub Advisory Database