914 matches found
CVE-2024-6285
Integer Underflow Wrap or Wraparound vulnerability in Renesas arm-trusted-firmware. An integer underflow in image range check calculations could lead to bypassing address restrictions and loading of images to unallowed addresses...
PT-2024-5458 · Nuvoton · Nuvoton Npcm7Xx Bmc Subsystem
Name of the Vulnerable Software and Affected Versions: Nuvoton NPCM7xx BMC subsystem affected versions not specified Description: The issue is related to an authentication bypass weakness in the Nuvoton BootBlock reference code used in the Nuvoton NPCM7xx BMC subsystem. An attacker with write...
U-Boot tools: double free vulnerability
Background U-Boot tools provides utiiities for working with Das U-Boot. Description A vulnerability has been discovered in U-Boot tools. Please review the CVE identifier referenced below for details. Impact In Das U-Boot a double free has been found in the cmd/gpt.c dorenamegptparts function...
GLSA-202405-23 : U-Boot tools: double free vulnerability
The remote host is affected by the vulnerability described in GLSA-202405-23 U-Boot tools: double free vulnerability - In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c dorenamegptparts function. Double freeing may result in a write-what-where condition, allowing an...
Apache Commons BCEL: Remote Code Execution
Background The Byte Code Engineering Library Apache Commons BCEL™ is intended to give users a convenient way to analyze, create, and manipulate binary Java class files those ending with .class. Description A vulnerability has been discovered in U-Boot tools. Please review the CVE identifier...
CVE-2023-48426
u-boot bug that allows for u-boot shell and interrupt over UART...
CVE-2023-48426
u-boot bug that allows for u-boot shell and interrupt over UART...
CVE-2023-48426 Chromecast Bootloader & Kernel-level code-execution including compromise of user-data
u-boot bug that allows for u-boot shell and interrupt over UART...
CVE-2023-48426 Chromecast Bootloader & Kernel-level code-execution including compromise of user-data
u-boot bug that allows for u-boot shell and interrupt over UART...
CVE-2023-48426
CVE-2023-48426 affects u-boot and is tied to a buffer overflow in memory that allows access to the u-boot shell and triggering interrupts over UART. The practical impact described across sources is the potential to bypass secure boot mechanisms. Affected component: u-boot (bootloader). Exact vuln...
CVE-2019-6268
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...
CVE-2019-6268
Summary : CVE-2019-6268 affects RAD SecFlow-2 devices (Hardware 0202; Firmware 4.1.01.63; U-Boot 2010.12). The vulnerability is a directory traversal via URIs starting with /.., allowing access to OS files (demonstrated reading /etc/shadow). Public docs report CVSS v3.1 base score 7.5 (HIGH) and ...
CVE-2019-6268
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...
CVE-2019-6268
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow...
CVE-2023-48424
U-Boot shell vulnerability resulting in Privilege escalation in a production device...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
CVE-2023-48425
U-Boot vulnerability resulting in persistent Code Execution...
Privilege escalation
U-Boot shell vulnerability resulting in Privilege escalation in a production device...