Memory Buffer Overflow in UNISOC BootROM Affects RSA Key Validation

CVE-2022-38692

What is CVE-2022-38692?

The BootROM from UNISOC contains a flaw in the validation of Certificate Type 0, where a missing size check for RSA keys can lead to a memory buffer overflow. This vulnerability can be exploited without requiring additional execution privileges, posing a potential risk to the integrity of systems using this BootROM.

References