Search results

[Bug] 9PFS client trusts server-controlled stat/name lengths in getdents path, leading to out-of-bounds read

Status: Open.

#11289 In RT-Thread/rt-thread;

· XueDugu opened on Mar 23, 2026

[Bug] legacy USB host trusts device-controlled bNumInterfaces and can trigger out-of-bounds access in fixed interface array

Status: Open.

#11288 In RT-Thread/rt-thread;

· XueDugu opened on Mar 23, 2026

[Bug] legacy usbdevice core trusts host-controlled wLength for Microsoft OS Compatible ID descriptor responses, causing heap out-of-bounds read and information disclosure

Status: Open.

#11287 In RT-Thread/rt-thread;

· XueDugu opened on Mar 23, 2026

[Bug] DFS partition probing accepts out-of-range MBR partition geometry and may forward out-of-bounds I/O to the parent block device

Status: Open.

#11286 In RT-Thread/rt-thread;

· XueDugu opened on Mar 23, 2026

[Bug] mtd-cfi erase-region parser has an off-by-one out-of-bounds write when sect_count reaches CFI_FLASH_SECT_MAX

Status: Open.

#11272 In RT-Thread/rt-thread;

· XueDugu opened on Mar 19, 2026

[Bug] malformed GPT entry with ending_lba < starting_lba creates an underflowed partition size

Status: Open.

#11271 In RT-Thread/rt-thread;

· XueDugu opened on Mar 19, 2026

[Bug] dlopen() fails to find already-loaded module — name mismatch between dlmodule_find() and _dlmodule_set_name()

Status: Open.

#11268 In RT-Thread/rt-thread;

· jingxbw-work opened on Mar 18, 2026

[Bug] multiple out-of-bounds writes in CherryUSB host audio descriptor parser during USB enumeration

Status: Open.

#11265 In RT-Thread/rt-thread;

· XueDugu opened on Mar 17, 2026

[Bug] out-of-bounds write due to unchecked format and frame indexes

Status: Open.

#11264 In RT-Thread/rt-thread;

· XueDugu opened on Mar 17, 2026

[Bug] heap-based buffer overflow in CherryUSB ADB device class due to unchecked host-controlled data_length

Status: Open.

#11263 In RT-Thread/rt-thread;

· XueDugu opened on Mar 17, 2026

[Bug] heap out-of-bounds write in HID report descriptor parser

Status: Open.

#11262 In RT-Thread/rt-thread;

· XueDugu opened on Mar 17, 2026

[Bug] integer overflow in GPT entry allocation causes OOB read on 32-bit targets

Status: Open.

#11260 In RT-Thread/rt-thread;

· XueDugu opened on Mar 17, 2026