In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HDenx U Boot
APPDenx2022.07< 2022.07
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Memory
CWE
References
Related vulnerabilities
CVE-2022-30767CRITICAL9.8PL ✓same product
Buffer overflow w obsłudze NFS w Das U-Boot (CVE-2022-30767)
CVE-2020-8432CRITICAL9.8PL ✓same product
Double free w U-Boot umożliwia zdalne wykonanie kodu (RCE)
CVE-2019-14195CRITICAL9.8PL ✓same product
U-Boot: nieograniczony memcpy w obsłudze NFS — możliwy RCE
CVE-2019-14192CRITICAL9.8PL ✓same product
U-Boot: nieograniczone memcpy przez integer underflow przy przetwarzaniu pakietów UDP
CVE-2019-14193CRITICAL9.8PL ✓same product
U-Boot: nieograniczone memcpy w obsłudze NFS (nfs_readlink_reply) — RCE