CVE-2024-1633

During the secure boot, bl2 the second stage of the bootloader loops over images defined in the table “bl2memparamsdescs”. For each image, the bl2 reads the image length and destination from the image’s certificate. Because of the way of reading from the image, which base on 32-bit unsigned integ...

CVE-2024-1633

creationtimestamp| type| source ---|---|--- 2024-02-19 18:26:44+00:00| seen| https://t.me/ctinow/187853 2024-02-19 18:26:53+00:00| seen| https://t.me/ctinow/187860 2024-02-20 18:39:09+00:00| seen| https://t.me/arpsyndicate/3664 2024-03-08 11:23:46+00:00| seen| https://t.me/ctinow/203222...

CVE-2024-1633

CVE-2024-1633 is a bootloader issue in bl2 where reading image length/destination from each image certificate uses a 32-bit unsigned value, causing an integer overflow. This can bypass memory range checks and write data outside buffers, potentially bypassing secure boot. Affected component: bl2 (...