Unseen. Until SecMate.

Unknown vulnerabilities in critical software. Found. Reported.

0+

Findings reported

0

Organizations

0%

Responsibly disclosed

Disclosed.

66 published · 100+ reported

STMicroelectronics · STM32Cube USB Host Library / PTP-MTP

USB Host PTP Property Enumeration Out-of-Bounds Write

SECMATE-2026-0031

STMicroelectronics · STM32Cube USB Host Library / PTP-MTP

USB Host PTP String Length Out-of-Bounds Write

SECMATE-2026-0030

STMicroelectronics · STM32Cube USB Host Library / PTP-MTP

USB Host PTP 32-Bit Array Length Out-of-Bounds Write

SECMATE-2026-0029

STMicroelectronics · STM32Cube USB Host Library / PTP-MTP

USB Host PTP 16-Bit Array Length Out-of-Bounds Write

SECMATE-2026-0028

STMicroelectronics · STM32Cube USB Host Library / MTP

USB Host MTP Storage Count Out-of-Bounds Access

SECMATE-2026-0027

STMicroelectronics · STM32Cube USB Host Library / Audio

USB Host Audio OUT Interface Count Out-of-Bounds Write

SECMATE-2026-0026

STMicroelectronics · STM32Cube USB Host Library / Audio

USB Host Audio IN Interface Count Out-of-Bounds Write

SECMATE-2026-0025

STMicroelectronics · STM32Cube USB Host Library / Audio

USB Host Audio Format Descriptor Invalid Dereference

SECMATE-2026-0024

STMicroelectronics · STM32Cube USB Host Library / Audio

USB Host AudioStreaming Descriptor Count Out-of-Bounds Write

SECMATE-2026-0023

STMicroelectronics · STM32Cube USB Host Library / Audio

USB Host Audio Control Descriptor Count Out-of-Bounds Write

SECMATE-2026-0022

STMicroelectronics · STM32Cube USB Device Library / MSC

USB Device MSC READ CAPACITY(16) Buffer Overflow

SECMATE-2026-0021

STMicroelectronics · STM32Cube USB Device Library / Core

USB Device GET_STATUS Endpoint Address Out-of-Bounds Write

SECMATE-2026-0020

TrustedFirmware · optee_os / core

SHA-3 Accelerated Finalize Heap Overflow

TrustedFirmware · optee_os / SE050 crypto driver (NXP)

SE050 RSA NOPAD Heap Underflow

Maintainer-classified bug

SECMATE-2026-0018

TrustedFirmware · optee_os / core

RSASSA PKCS#1 v1.5 Padding Size Underflow

ArduPilot · ArduPilot / AP_ADSB

Out-of-Bounds Write in uAvionix GDL90 Message Parsing

SECMATE-2026-0016

ArduPilot · ArduPilot / AP_ADSB

Unsafe Callsign Handling in Sagetech XP ADS-B Driver

SECMATE-2026-0015

ArduPilot · ArduPilot / AP_ADSB

Out-of-Bounds Write in Sagetech MXS Message Parsing

SECMATE-2026-0014

LFEnergy - EVerest · everest-core

ISO15118 Energy Transfer Modes Overflow Corrupts EVSE State

LFEnergy - EVerest · everest-core

ISO15118 Session Setup Payment Options Overflow Corrupts EVSE State

LFEnergy - EVerest · everest-core

ISO15118 Session Setup Use-After-Free Crashes EVSE Process

Siemens · SICAM SIAPP SDK

Arbitrary File Deletion via Unvalidated Path

Siemens · SICAM SIAPP SDK

Command Injection via Shell Command Construction

Siemens · SICAM SIAPP SDK

Server Stack Overflow via Oversized Input

Siemens · SICAM SIAPP SDK

Client Stack Overflow via Oversized Input

Siemens · SICAM SIAPP SDK

Stack Overflow via Unchecked Input Values

Siemens · SICAM SIAPP SDK

Out-of-Bounds Write in SICAM SIAPP SDK

Tuya · arduino-TuyaOpen

WiFiMulti Single-Byte Heap Overflow in addAP

Tuya · arduino-TuyaOpen

WiFiUDP Null Pointer Dereference via Malicious Packets

Tuya · arduino-TuyaOpen

TuyaIoT Out-of-Bounds Read in DP Event Handling

Tuya · arduino-TuyaOpen

DnsServer Heap Overflow via QNAME Parsing

Intel · Slim Bootloader

ext2 Group Descriptor Allocation Integer Overflow

Espressif · esp-usb / usb_host_uvc

Stack Buffer Overflow in UVC Descriptor Printing

Espressif · esp-usb / usb_host_hid

USB Host HID Descriptor Use-After-Free

Espressif · esp-usb / usb_host_hid

Double-Free Race Condition in USB Host HID Device Close Path

Zephyr Project · Zephyr

eswifi Socket Send Buffer Overflow via Unbounded Payload

SiliconLabs · Gecko SDK

Integer Underflow in PSA Crypto EC-JPAKE ZKP Parsing

Zephyr Project · Zephyr

ATAES132A Response Length Allows Stack Buffer Overflow

PX4 · PX4-Autopilot

Zenoh uORB Subscriber Allows Arbitrary Stack Allocation

PX4 · PX4-Autopilot

BST Device Name Length Can Overflow Driver Buffer

SiliconLabs · Gecko SDK

Integer Underflow Leading to Buffer Overread in Secure NCP Host

Renesas · MCUBoot

Serial Recovery Stack Buffer Overflow in MCUBoot

SECMATE-2025-0025

CCM MAC Length Stack Buffer Overflow in MbedTLS

SECMATE-2025-0024

CCM Tag Length Stack Buffer Overflow in MbedTLS

SECMATE-2025-0023

GCM Tag Length Stack Buffer Overflow in MbedTLS

SECMATE-2025-0022

RMAC Read Buffer Overflow

SECMATE-2025-0021

AES-XTS Buffer Overflow in MbedTLS Hardware Path

SECMATE-2025-0020

RSA Signature Verification Pointer Underflow

SECMATE-2025-0019

Golioth · Pouch

BLE GATT Heap-Based Buffer Overflow in Certificate Handling

Golioth · Firmware SDK

Blockwise Transfer Path Out-of-Bounds Read

Golioth · Firmware SDK

LightDB State Out-of-Bounds Read via Integer Underflow

Golioth · Firmware SDK

Payload Utils Stack-Based Buffer Overflow

Espressif · ESP-IDF

Out-of-Bounds Read in BLE ATT Prepare Write Handling

Espressif · ESP-IDF

Use-After-Free in BLE Provisioning Transport

Arduino · ArduinoCore-avr

Stack-Based Buffer Overflow in Floating-Point to String Conversion

LFEnergy - EVerest · everest-core

Out-of-bounds read in DZG_GSH01 SLIP CRC parser can crash powermeter driver

RustFS · RustFS

SourceIp bypass via spoofed X-Forwarded-For/Real-IP headers

RustFS · RustFS

RustFS gRPC GetMetrics deserialization panic enables remote DoS

NASA · CryptoLib

Out-of-Bounds Read in KMC Encrypt Metadata Parsing via Flawed strtok Pattern

NASA · CryptoLib

Out-of-Bounds Read in KMC AEAD Encrypt Metadata Parsing via Flawed strtok Pattern

NASA · CryptoLib

Memory Leak in KMC Encrypt Function Leads to Resource Exhaustion

NASA · CryptoLib

Memory Leak on HTTP Error Response in KMC Client

NASA · CryptoLib

Unbounded Memory Allocation in KMC HTTP Response Handler Allows Resource Exhaustion

NASA · CryptoLib

Heap Buffer Overflow in MariaDB SA Hexstring Conversion

obgm · libcoap

Out-of-Bounds Read in OSCORE Parsing

obgm · libcoap

Static Buffer Overflow in Address Resolution

Under responsible disclosure.

Some reported findings remain private while coordinated disclosure is ongoing and therefore do not yet have public disclosure records. No private technical details are published.

What's hidden in yours?