BootROM
by UNISOC
CVEs (5)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-38696 | Cri | 0.64 | 9.8 | 0.01 | Sep 1, 2025 | In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges. | ||
| CVE-2022-38692 | Cri | 0.64 | 9.8 | 0.00 | Sep 1, 2025 | In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges. | ||
| CVE-2022-38695 | Hig | 0.51 | 7.8 | 0.00 | Sep 1, 2025 | In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed. | ||
| CVE-2022-38694 | Hig | 0.51 | 7.8 | 0.01 | Sep 1, 2025 | In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed. | ||
| CVE-2022-38691 | Hig | 0.51 | 7.8 | 0.00 | Sep 1, 2025 | In BootROM, there is a possible missing validation for Certificate Type 0. This could lead to local escalation of privilege with no additional execution privileges needed. |
- risk 0.64cvss 9.8epss 0.01
In BootRom, there's a possible missing payload size check. This could lead to memory buffer overflow without requiring additional execution privileges.
- risk 0.64cvss 9.8epss 0.00
In BootROM, there is a missing size check for RSA keys in Certificate Type 0 validation. This could lead to memory buffer overflow without requiring additional execution privileges.
- risk 0.51cvss 7.8epss 0.00
In BootRom, there's a possible unchecked command index. This could lead to local escalation of privilege with no additional execution privileges needed.
- risk 0.51cvss 7.8epss 0.01
In BootRom, there is a possible unchecked write address. This could lead to local escalation of privilege with no additional execution privileges needed.
- risk 0.51cvss 7.8epss 0.00
In BootROM, there is a possible missing validation for Certificate Type 0. This could lead to local escalation of privilege with no additional execution privileges needed.