VULNERABILITY INTELLIGENCE

CVE-2022-38692

CVSS score9.8 CRITICAL

EPSS probability0.46%

CISA KEVNot currently listed

Published2025-09-01

Last modified2026-06-17

Description

In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges.