Skip to content
OpenAdvisories
High · 7.2 CVE-2024-10238 EUVD-2024-33598GHSA-6rpv-x4qm-m5rx

fld->used_bytes without sanity check causes stack overflow

Published Feb 4, 2025 · Updated Feb 4, 2025 · Assigned by Supermicro

Description

A security issue in the firmware image verification implementation

at Supermicro MBD-X12DPG-OA6. An attacker can upload a specially crafted image that will cause a stack overflow is caused by not checking fld->used_bytes.

Affected products

VendorProductAffectedFixed
SMCI MBD-X12DPG-OA6 1.04.16 —

References