CVE-2019-16128

MEDIUM

Microchip CryptoAuthentication Library <20191122 - Buffer Overflow

Title source: llm
STIX 2.1

Description

Microchip CryptoAuthentication Library CryptoAuthLib prior to 20191122 has a Buffer Overflow (issue 1 of 2).

References (3)

Core 3
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/10/22/1
Exploit, Press/Media Coverage, Third Party Advisory x_refsource_misc
https://census-labs.com/news/2020/10/21/microchip-cryptoauthlib-atcab_sign_base-buffer-overflow/

Scores

CVSS v3 6.8
EPSS 0.0010
EPSS Percentile 27.2%
Attack Vector PHYSICAL
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-120
Status published
Products (1)
microchip/cryptoauthlib < 20191122
Published Oct 22, 2020
Tracked Since Feb 18, 2026