What’s Vulnerable › Vulnerabilities

CVE-2025-6093: uYanki board-stm32f103rc-berial heartrate1_hal.c heartrate1_i2c_hal_write stack-based overflow

• Severity: medium (CVSS 5.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-15 · updated 2026-06-17
• Weakness: CWE-119

Description

A vulnerability classified as critical was found in uYanki board-stm32f103rc-berial up to 84daed541609cb7b46854cc6672a275d1007e295. This vulnerability affects the function heartrate1_i2c_hal_write of the file 7.Example/hal/i2c/max30100/Manual/demo2/2/heartrate1_hal.c. The manipulation of the argument num leads to stack-based buffer overflow. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.

Affected products

• uYanki board-stm32f103rc-berial: 84daed541609cb7b46854cc6672a275d1007e295

References

• https://github.com/uYanki/board-stm32f103rc-berial/issues/3
• https://vuldb.com/?ctiid.312562
• https://vuldb.com/?id.312562
• https://vuldb.com/?submit.588106

Get alerted when CVE-2025-6093 or the next vulnerability affects your stack