21 matches found
CVE-2021-36357: Incorrect Conversion between Numeric Types
An issue was discovered in OpenPOWER 2.6 firmware. unpacktimestamp calls le32tocpu for endian conversion of a uint16t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion...
9.8CVSS5.8AI score0.01175EPSS
SaveExploits0References2
20