In FreeBSD 12.1-STABLE before r361918, 12.1-RELEASE before p6, 11.4-STABLE before r361919, 11.3-RELEASE before p10, and 11.4-RC2 before p1, an invalid memory location may be used for HID items if the push/pop level is not restored within the processing of that HID item allowing an attacker with physical access to a USB port to be able to use a specially crafted USB device to gain kernel or user-space code execution.
AI analysis not yet available
Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.
No Fix Known
No patch has been released yet. Apply workarounds or mitigations where available.
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
19
Affected Products
4
References
freebsd / freebsd
| - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| freebsd | freebsd | - | - |
| netapp | clustered_data_ontap | - | - |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability
Impact