CVE-2019-2267: Undefined Security Weakness

Locked regions may be modified through other interfaces in secure boot loader image due to improper access control. in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networkin...

PT-2020-10886

Name of the Vulnerable Software and Affected Versions Qualcomm Snapdragon versions affected versions not specified Description The issue is related to improper access control in the secure boot loader image, which may allow locked regions to be modified through other interfaces. This affects...

Das U-Boot Buffer Overflow Vulnerability (CNVD-2019-34618)

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A buffer overflow vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to...

DEBIAN-CVE-2019-13106

Das U-Boot versions 2016.09 through 2019.07-rc4 can memset too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution...

DEBIAN-CVE-2019-13105

Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem...

Das U-Boot Buffer Overflow Vulnerability (CNVD-2019-34819)

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A buffer overflow vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to...

Das U-Boot Digital Error Vulnerability

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A numeric error vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to caus...

Das U-Boot Buffer Overflow Vulnerability (CNVD-2019-34816)

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A buffer overflow vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to...

Das U-Boot Buffer Overflow Vulnerability (CNVD-2019-34817)

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A buffer overflow vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to...

Das U-Boot Buffer Overflow Vulnerability (CNVD-2019-34813)

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A buffer overflow vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to...

Das U-Boot Buffer Overflow Vulnerability (CNVD-2019-34810)

Das U-Boot is a boot loader program mainly for embedded systems. The program supports many different computer system architectures such as PPC, ARM, AVR32, MIPS, x86, 68k, Nios and MicroBlaze. A buffer overflow vulnerability exists in Das U-Boot. An attacker could exploit this vulnerability to...

UBUNTU-CVE-2019-14196

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfslookupreply...

EfiGuard - Disable PatchGuard And DSE At Boot Time

EfiGuard is a portable x64 UEFI bootkit that patches the Windows boot manager, boot loader and kernel at boot time in order to disable PatchGuard and Driver Signature Enforcement DSE. Features Currently supports all EFI-compatible versions of Windows x64 ever released, from Vista SP1 to Server...

Buffer Overflow Vulnerability in Multiple IBM Products

The IBM Power System S922, among others, is a Power processor-based server device from IBM in the United States. A buffer overflow vulnerability exists in the boot loader in several IBM products. An attacker could exploit this vulnerability to overwrite the bootloader's instruction memory, bypass...

Denial Of Service (Dos)

xen is vulnerable to denial of service. This is due to the way the pyGrub boot loader handles compressed kernel images, which consumes an excessive amount of CPU resources when a large bzip2 or lzma compressed kernel image is processed, resulting in an out-of-memory condition...

CVE-2018-5861

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader...

CVE-2018-5861

CVE-2018-5861 is documented as a heap-overflow risk in CAF Android bootloader code using the Linux kernel, affecting Android for MSM/QRD Android builds with Qualcomm bootloaders. The vulnerability arises from incomplete partition-size checks during loading of secure applications, with CVSS v3.0 i...

CVE-2018-5861: Incorrect Type Conversion or Cast

In all android releasesAndroid for MSM, Firefox OS for MSM, QRD Android from CAF using the linux kernel, existing checks in place on partition size are incomplete and can lead to heap overwrite vulnerabilities while loading a secure application from the boot loader...

PT-2018-17196

Name of the Vulnerable Software and Affected Versions: Android for MSM affected versions not specified Firefox OS for MSM affected versions not specified QRD Android affected versions not specified Description: The issue arises from incomplete checks on partition size, which can lead to heap...

CVE-2017-3197

GIGABYTE BRIX UEFI firmware for the GB-BSi7H-6500 version F6 and GB-BXi7-5775 version F2 platforms does not securely implement BIOSWE, BLE, SMMBWP, and PRx features. As a result, the BIOS is not protected from arbitrary write access and may permit modifications to the SPI flash...