Buffer Copy Vulnerability in USB-C Devices by Vendor A

CVE-2025-24004

What is CVE-2025-24004?

A vulnerability exists in USB-C devices that allows an attacker with physical access to exploit the device through a malicious message sent over USB-C. This can trigger an unsecure copy to a buffer, jeopardizing the integrity of the device's data and leading to a temporary denial-of-service until the device restarts via the watchdog mechanism. It highlights the importance of physical security measures to mitigate risks associated with unauthorized device access.

References