CVE-2022-34835

Description

In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.

Weakness classification

• CWE-787: Out-of-bounds Write

Primary references

• cve@mitre.org — Exploit, Patch, Third Party Advisory
• cve@mitre.org — Exploit, Patch, Vendor Advisory
• cve@mitre.org — Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Patch, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory
• 0b142b55-0307-4c5a-b3c9-f314f3fb7c5e