This is a fun one. A colleague discovered it and gave me a heads up, as we're working on the same MCU. The discord thread about it is pretty fascinating, but really cool to see the turnaround time - and then seeing a sec advisory about it, in pretty short order. Though, the bug was discovered on Feb 10th, not Feb 13th 😕
https://rustsec.org/advisories/RUSTSEC-2023-0014.html
wide-midnight-78598
02/15/2023, 12:20 AM
These are one of those bad ones though:
It will be necessary to rebuild all affected firmware binaries, and flash or deploy the new firmware binaries to affected devices.