Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2022-38692

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Unisoc

Description

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Unisoc (Shanghai) Technologies Co., Ltd. SC9863A/T310/T610/T618/T606/T612/T616/T760/T770/T820/S8000/

Default version status: unaffected

  • /affected

References