CVE-2021-36357

An issue was discovered in OpenPOWER 2.6 firmware. unpacktimestamp calls le32tocpu for endian conversion of a uint16t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion...

PT-2021-21249

Name of the Vulnerable Software and Affected Versions OpenPOWER version 2.6 Description An issue was discovered in the OpenPOWER firmware. The unpack timestamp function calls le32 to cpu for endian conversion of a uint16 t "year" value, resulting in a type mismatch that can truncate a higher...

CVE-2021-36357: Incorrect Conversion between Numeric Types

An issue was discovered in OpenPOWER 2.6 firmware. unpacktimestamp calls le32tocpu for endian conversion of a uint16t "year" value, resulting in a type mismatch that can truncate a higher integer value to a smaller one, and bypass a timestamp check. The fix is to use the right endian conversion...