Vulnerabilities

TI-2023-10203 CVE-2023-24585 · GHSA-5979-8rg3-w9v6

Memory corruption in silabs.com Gecko Platform

MEDIUM 44

An out-of-bounds write vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01209 Published 2023-11-14 No fix listed CWE-119

TI-2023-10642 CVE-2023-25181 · GHSA-fpwc-rv8p-8vm5

HIGH 76

A heap-based buffer overflow vulnerability exists in the HTTP Server functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01688 Published 2023-11-14 No fix listed CWE-122

TI-2023-12937 CVE-2023-28391 · GHSA-v79c-gh33-wrmv

HIGH 76

A memory corruption vulnerability exists in the HTTP Server header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01475 Published 2023-11-14 No fix listed CWE-119

TI-2023-12476 CVE-2023-27882 · GHSA-24vc-j5q2-h3f9

HIGH 82

A heap-based buffer overflow vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01778 Published 2023-11-14 No fix listed CWE-122

TI-2023-12925 CVE-2023-28379 · GHSA-r3hj-9x99-gmrh

HIGH 82

A memory corruption vulnerability exists in the HTTP Server form boundary functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01672 Published 2023-11-14 No fix listed CWE-119

TI-2023-14952 CVE-2023-31247 · GHSA-78q9-mf5f-jj96

HIGH 82

A memory corruption vulnerability exists in the HTTP Server Host header parsing functionality of Weston Embedded uC-HTTP v3.01.01.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01672 Published 2023-11-14 No fix listed CWE-119