Buffer Overflow Vulnerability in UNISOC BootRom

CVE-2022-38696

What is CVE-2022-38696?

A vulnerability exists in UNISOC's BootRom that may allow for a memory buffer overflow due to a missing payload size check. This flaw can be exploited without needing additional execution privileges, potentially allowing attackers to disrupt the operation of the affected systems. It is crucial for organizations utilizing UNISOC products to apply necessary security measures to mitigate risks associated with this vulnerability.

References