VULNERABILITY INTELLIGENCE

CVE-2018-1000205

CVSS score5.5 MEDIUM

EPSS probability0.72%

CISA KEVNot currently listed

Published2018-06-26

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Description

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.

Weakness classification

CWE-20: Improper Input Validation

Primary references

cve@mitre.org — Mailing List, Patch, Vendor Advisory
cve@mitre.org — Mailing List, Mitigation, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Mailing List, Mitigation, Vendor Advisory