CVE-2025-6093
Awaiting Analysis Awaiting Analysis - Queue
BaseFortify

Publication date: 2025-06-15

Last updated on: 2025-06-16

Assigner: VulDB

Description
A vulnerability classified as critical was found in uYanki board-stm32f103rc-berial up to 84daed541609cb7b46854cc6672a275d1007e295. This vulnerability affects the function heartrate1_i2c_hal_write of the file 7.Example/hal/i2c/max30100/Manual/demo2/2/heartrate1_hal.c. The manipulation of the argument num leads to stack-based buffer overflow. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-06-15
Last Modified
2025-06-16
Generated
2026-05-07
AI Q&A
2025-06-16
EPSS Evaluated
2026-05-05
NVD
Affected Vendors & Products
Currently, no data is known.
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121 A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?

This vulnerability is a stack-based buffer overflow in the function heartrate1_i2c_hal_write of the uYanki board-stm32f103rc-berial device. It occurs due to improper handling of the argument 'num', which can be manipulated to overflow the stack buffer, potentially leading to unexpected behavior or exploitation.


How can this vulnerability impact me? :

The vulnerability can lead to a stack-based buffer overflow, which may allow an attacker with limited privileges to cause a denial of service, execute arbitrary code, or compromise the integrity and availability of the affected device.


Ask Our AI Assistant
Need more information? Ask your question to get an AI reply (Powered by our expertise)
0/70
EPSS Chart