← Back

CVE-2022-34835

nvd nist
Published: Jun 30, 2022Modified: May 12, 2026

JSON object

Loading...
9.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 3.9 / Impact: 5.9
Source: NVD

Description

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

Affected (6)

Products: Denx: U Boot
Denx
1 product
U Boot
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Denx
U Boot
Before 2022.07
U Boot
Version 2022.07 rc1
U Boot
Version 2022.07 rc2
U Boot
Version 2022.07 rc3
U Boot
Version 2022.07 rc4
U Boot
Version 2022.07 rc5

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (8)

Source: cve@mitre.org
ExploitPatchThird Party Advisory
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory
Source: 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e

Timeline

No history available yet.