Skip to content
CVE PROGRAM SOURCE RECORD7.2 High

CVE-2024-10239

fld->used_bytes without sanity check causes stack overflow

Description

A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with administrator privileges can upload a specially crafted image, which can cause a stack overflow due to the unchecked fat->fsd.max_fld.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SMCI MBD-X12DPG-OA6

Default version status: affected

  • 1.04.16affected

References