Vulnerabilities

An out-of-bounds write vulnerability in the SPI host command interface of Semtech's LR11xx transceiver firmware where a crafted SPI host command with an oversized length field can cause the firmware to write up to 254 ar…

The Semtech LR11xx LoRa transceivers implement secure boot functionality using digital signatures to authenticate firmware.

The Semtech LR11xx LoRa transceivers running early versions of firmware contains an information disclosure vulnerability in its firmware validation functionality.

An improper access control vulnerability exists in Semtech LoRa LR11xxx transceivers running early versions of firmware where the memory write command accessible via the physical SPI interface fails to enforce write prot…

LoRaMac-node is a reference implementation and documentation of a LoRa network node.

In LoRaMac-node before 4.4.4, a reception buffer overflow can happen due to the received buffer size not being checked.

In LoRa Basics Station before 2.0.4, there is a Use After Free vulnerability that leads to memory corruption.