CVE-2021-27208

When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code...

CVE-2021-27208

CVE-2021-27208 concerns a buffer overflow in the NAND parameter-page read path of the Xilinx Zynq-7000 ROM NAND driver when booting from NAND flash. The vulnerability arises because inputs from the NAND parameter page are not validated; if a field is too large, it can overflow a buffer and enable...