CVE-2022-34835 — Out-of-bounds Write in U-boot
Severity
9.8CRITICALNVD
OSV7.1
EPSS
0.4%
top 38.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedJun 30
Latest updateJul 4
Description
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9
Affected Packages6 packages
Patches
🔴Vulnerability Details
3📋Vendor Advisories
3Microsoft▶
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md f↗2022-06-14
Debian▶
CVE-2022-34835: u-boot - In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant sta...↗2022