CVE-2026-34963

Katalog CVE

CVSS 7.8 · High EPSS 0,22%

Kerentanan Integer Overflow or Wraparound pada pengutronix barebox. Skor CVSS 3.1 7.8 (High) menurut NVD.

Deskripsi (NVD)

barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows undersized heap allocation, and PE section loading logic fails to validate that PointerToRawData plus copied size remains within the PE file buffer. An attacker can supply a malicious EFI PE binary via TFTP, USB, SD card, or network boot to trigger heap buffer overflow or out-of-bounds read from heap memory, potentially achieving code execution in bootloader context.

Rincian

Terbit di NVD

11 Mei 2026

Terakhir diubah

18 Juli 2026

Status NVD

Modified

CVSS 3.1

7.8 (High), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-190: Integer Overflow or Wraparound

EPSS (30 hari)

0,22% peluang dieksploitasi; lebih tinggi dari 11,6% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.vulncheck.com/advisories/barebox-efi-pe-loader-memory-safety-vulnerabilities advisory pihak ketiga
• https://github.com/barebox/barebox product
• https://github.com/barebox/barebox/releases/tag/v2026.04.0 release notes
• https://y637f9qq2x.com/posts/barebox-sandbox-vulns/