Buffer Mismanagement in Yubico's libu2f-host Affects Device Security
CVE-2019-9578

7.5HIGH

Key Information:

Vendor: Yubico
Status: Libu2f-host
Vendor: CVE Published:; 5 March 2019

What is CVE-2019-9578?

A vulnerability in Yubico's libu2f-host prior to version 1.1.8 involves improper parsing of the init response, which leads to the leakage of uninitialized stack memory back to the connected device. This issue can potentially expose sensitive information and create security weaknesses in the device's data handling processes.