Azure RTOS Information Disclosure Vulnerability

What is RTOS?
Azure RTOS is an embedded development suite including a small but powerful operating system that provides reliable, ultra-fast performance for resource-constrained devices. See Azure RTOS Overview for more information.
Version 6.1.9
Exploitation of this vulnerability requires that a user plug in a malicious USB device.

What is the action required to take the update?
You need to recompile your project with updated USBX source code. In addition, if your USB device driver uses vendor request (registered by ux_device_stack_microsoft_extension_register) you need to update your code to perform memory boundary check.
If you are not using vendor requests, (i.e. you don’t register the callback function) you don’t need to update your code.

Security updates
6.1.9 — https://azure.microsoft.com/en-us/services/rtos