Approved changes feed: RSS · Atom
cpe:2.3:a:uboot:uboot:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Uboot (19eeab0b-c6d6-5ba8-8cf6-bc08c76435b4) |
|---|---|
| Product | Uboot (9f7fbdf4-71f7-5e8f-872f-d25ed8903e13) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-2347 |
vulnerable | 2026-06-08 05:43:35.374491 |
Unchecked Download size in Uboot
HIGH (7.7)
There exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.
Published: 2022-09-23T12:50:08.787Z
Updated: 2026-05-12T10:12:24.850Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.