Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9hr4-cwvw-3xm2

Опубликовано: 11 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 7.1

Описание

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.

EPSS

Процентиль: 32%
0.00126
Низкий

7.1 High

CVSS3

Дефекты

CWE-20

Связанные уязвимости

CVSS3: 7.1
nvd
больше 3 лет назад

Improper validation of destination address in SVC_LOAD_FW_IMAGE_BY_INSTANCE and SVC_LOAD_BINARY_BY_ATTRIB in a malicious UApp or ABL may allow an attacker to overwrite arbitrary bootloader memory with SPI ROM contents resulting in a loss of integrity and availability.

EPSS

Процентиль: 32%
0.00126
Низкий

7.1 High

CVSS3

Дефекты

CWE-20