Medium severity5.5OSV Advisory· Published Jun 26, 2018· Updated Jun 17, 2026

CVE-2018-1000205

Description

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

U Boot/U BootOSV2 versions
LABEL_2002_11_05_0120, LABEL_2002_11_05_1735, LABEL_2002_11_10_2310, …+ 1 more
- (no CPE)range: LABEL_2002_11_05_0120, LABEL_2002_11_05_1735, LABEL_2002_11_10_2310, …
- (no CPE)

Patches

Vulnerability mechanics

References

lists.denx.de/pipermail/u-boot/2018-June/330454.htmlnvdMailing ListPatchVendor Advisory
lists.denx.de/pipermail/u-boot/2018-June/330898.htmlnvdMailing ListMitigationVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.358
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000