Threats affecting pkg:github/trabucayre/openFPGALoader

openFPGALoader versions 1.1.1 and earlier contain a heap-buffer-overflow read vulnerability in the POFParser::parseSection() function. This flaw allows out-of-bounds heap memory access when parsing a specially crafted . pof file. Exploitation does not require FPGA hardware. The vulnerability is classified as CWE-125 and has a CVSS v3.1 score of 7.1, indicating high severity. No official patch or remediation guidance is currently available from the vendor.

openFPGALoader versions 1.1.1 and earlier contain a heap-buffer-overflow read vulnerability in the BitParser::parseHeader() function. This flaw allows out-of-bounds heap memory access when parsing a specially crafted . bit file. Exploitation does not require FPGA hardware. The vulnerability has a CVSS score of 7.1, indicating high severity, with potential impact on confidentiality and availability. No official patch or remediation has been confirmed yet.