CVE-2022-34835
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2022-06-30
- Last modified
- 2026-05-12
- Weaknesses
- CWE-787
Affected products
- U-boot (Denx)
- Ruggedcom Rox Mx5000 (Siemens)
- Ruggedcom Rox Mx5000re (Siemens)
- Ruggedcom Rox Rx1400 (Siemens)
- Ruggedcom Rox Rx1500 (Siemens)
- Ruggedcom Rox Rx1501 (Siemens)
- Ruggedcom Rox Rx1510 (Siemens)
- Ruggedcom Rox Rx1511 (Siemens)
- Ruggedcom Rox Rx1512 (Siemens)
- Ruggedcom Rox Rx1524 (Siemens)
- Ruggedcom Rox Rx1536 (Siemens)
- Ruggedcom Rox Rx5000 (Siemens)
References
- https://github.com/u-boot/u-boot/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409
- https://lists.denx.de/pipermail/u-boot/2022-June/486113.html
- https://source.denx.de/u-boot/u-boot/-/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409
- https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html
- https://cert-portal.siemens.com/productcert/html/ssa-577017.html
