| Max CVSS | 5.0 | Min CVSS | 4.6 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2019-9578 | 5.0 |
In devs.c in Yubico libu2f-host before 1.1.8, the response to init is misparsed, leaking uninitialized stack memory back to the device.
|
24-08-2020 - 17:37 | 05-03-2019 - 23:29 | |
| CVE-2018-20340 | 4.6 |
Yubico libu2f-host 1.1.6 contains unchecked buffers in devs.c, which could enable a malicious token to exploit a buffer overflow. An attacker could use this to attempt to execute malicious code using a crafted USB device masquerading as a security to
|
05-12-2019 - 17:15 | 21-03-2019 - 16:00 |