CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38695

In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38696

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38692

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38691

In BootROM, there is a possible missing validation for Certificate Type 0. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38696

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38696

In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38696

Summary (CVE-2022-38696) : Multiple connected sources identify a vulnerability in BootRom caused by a missing payload size check, which could lead to a memory buffer overflow without requiring extra privileges. The affected component is described as BootRom (often in UNISOC chipsets context). No ...

CVE-2022-38695

In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38695

CVE-2022-38695 concerns an unchecked command index in BootRom, enabling local privilege escalation without additional execution privileges. The Red Hat, NVD, CVE/CVEList and related feeds consistently describe the issue as affecting BootRom on UNISOC chipsets, with the impact described as local p...

CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38694

In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38694

CVE-2022-38694 describes a vulnerability in the BootRom where an unchecked write address could enable local escalation of privilege without extra execution privileges. Connected sources indicate the issue affects Unisoc chipsets and has been discussed across multiple advisories (NVD, Red Hat, CVE...

CVE-2022-38692

CVE-2022-38692 affects BootROM and stems from a missing size check for RSA keys in Certificate Type 0 validation, which can cause a memory buffer overflow without requiring additional execution privileges. The vulnerability’s root cause and potential impact are described across multiple sources (...

CVE-2022-38692

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges...

CVE-2022-38691

In BootROM, there is a possible missing validation for Certificate Type 0. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38691

In BootROM, there is a possible missing validation for Certificate Type 0. This could lead to local escalation of privilege with no additional execution privileges needed...

CVE-2022-38691

CVE-2022-38691 concerns a vulnerability in the BootROM where there is a possible missing validation for Certificate Type 0. The documented impact is local escalation of privilege with no additional execution privileges required. The description is consistent across multiple sources (NVD/Red Hat/C...

PT-2025-35462

Name of the Vulnerable Software and Affected Versions: Cisco BootROM affected versions not specified Description: In BootROM, a missing validation check for Certificate Type 0 may allow for local privilege escalation without requiring additional execution privileges. Recommendations: At the momen...