Description
An insufficient boundary validation in the USB code could lead to an out-of-bounds read on the heap, which could potentially lead to an arbitrary write and remote code execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| FreeBSD | FreeBSD | 14.1-RELEASE – < p5, 14.0-RELEASE – < p11, 13.4-RELEASE – < p1, 13.3-RELEASE – < p7 | p5 |
Advisories 1
- WID-SEC-2024-2188 FreeBSD Project FreeBSD OS: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Sep 19, 2024