Skip to content
OpenAdvisories

Archive

19 February 2024

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Low 2.0

    FIP Header Integer Overflow

    During the secure boot, bl2 (the second stage of the bootloader) loops over images defined in the table “bl2_mem_params_descs”. For each image, the bl2 reads the image length and destination from the image’s certificate. Because of the way of reading from the…

  • Low 3.5

    Msa-24-0006: idor on dashboard comments block

    Insufficient checks in a web service made it possible to add comments to the comments block on another user's dashboard when it was not otherwise available (e.g., on their profile page).