https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 20:39:19 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-45848 EUVD-2026-45848 https://cve.radiocsirt.org/vuln/euvd-2026-45848 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25860 <p>The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.</p> <p>The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25860 https://cve.radiocsirt.org/vuln/gsd-2020-25860 gsd-2020-25860 https://cve.radiocsirt.org/vuln/gsd-2020-25860 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25860 <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rauc, Ubuntu:22.04:LTS: rauc</p> <p>The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.</p> <p><strong>Affected:</strong> Ubuntu:20.04:LTS: rauc, Ubuntu:22.04:LTS: rauc</p> <p>The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the file is reopened for installation. An attacker who can modify the update file just before it is reopened can install arbitrary code on the device.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-25860 https://cve.radiocsirt.org/vuln/vde-2021-024 <p>The vulnerability is a Time-of-Check-Time-of-Use (CWE-367) issue which allows an attacker with access to the firmware update file to overwrite it after it has been verified (but before installation is completed), which consequently allows installing an arbitrary firmware update, bypassing the cryptographic signature check mechanism.</p> <p>The vulnerability is a Time-of-Check-Time-of-Use (CWE-367) issue which allows an attacker with access to the firmware update file to overwrite it after it has been verified (but before installation is completed), which consequently allows installing an arbitrary firmware update, bypassing the cryptographic signature check mechanism.</p> https://cve.radiocsirt.org/vuln/vde-2021-024