PT-2020-9792 · Atmel · Atmel Advanced Software Framework

George Poulios · Published 2020-10-22 · Updated 2020-10-30 · CVE-2019-16127

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Atmel Advanced Software Framework (ASF) version 4

Description The issue is related to an Integer Overflow in the Atmel Advanced Software Framework (ASF). No information is available about the estimated number of potentially affected devices or real-world incidents where this issue was exploited.

Recommendations For Atmel Advanced Software Framework (ASF) version 4, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Integer Overflow

Weakness Enumeration

CWE-190

Related Identifiers

CVE-2019-16127

Affected Products

Atmel Advanced Software Framework

References · 4

• 🔥 https://census-labs.com/news/2020/10/21/microchip-asf4-integer-overflows-in-flash_read-flash_write-and-flash_append · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-16127 · Security Note
• https://microchip.com/mplab/avr-support/advanced-software-framework · Vendor Advisory
• https://openwall.com/lists/oss-security/2020/10/22/1 · Note