PT-2022-24875 · Microsoft · Azure Rtos Usbx

Szymonh · Published 2022-10-13 · Updated 2025-10-27 · CVE-2022-39293

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Azure RTOS USBX versions prior to 6.1.12

Description The issue arises from the ux host class pima read function in Azure RTOS USBX, where the data length from a device response is read and used in calculations. Specifically, the header length value is used in a comparison that can lead to an overflow if header length is smaller than UX HOST CLASS PIMA DATA HEADER SIZE. This overflow can cause a write buffer overflow when moving the data pointer in a while loop. The estimated number of potentially affected devices is not provided.

Recommendations For Azure RTOS USBX versions prior to 6.1.12, update to version 6.1.12 or later to resolve the issue. As a temporary workaround, add a check for header length to ensure it is greater than UX HOST CLASS PIMA DATA HEADER SIZE and greater than or equal to the current returned data length (transfer request -> ux transfer request actual length).

Exploit

Fix

Integer Underflow

Weakness Enumeration

CWE-191

Related Identifiers

CVE-2022-39293

GHSA-GG76-H537-XQ48

Affected Products

Azure Rtos Usbx

References · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/39xxx/CVE-2022-39293.json · Exploit
• https://github.com/azure-rtos/usbx/security/advisories/GHSA-gg76-h537-xq48 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-39293 · Security Note
• https://osv.dev/vulnerability/CVE-2022-39293 · Vendor Advisory
• https://github.com/azure-rtos/usbx · Note
• https://github.com/azure-rtos/usbx/releases/tag/v6.1.12_rel · Note
• https://t.me/cveNotify/140462 · Telegram Post