Skip to content
OpenAdvisories
High · 7.2 CVE-2024-10239 EUVD-2024-33599GHSA-4wqc-fqvf-wh8w

fld->used_bytes without sanity check causes stack overflow

Published Feb 4, 2025 · Updated Feb 4, 2025 · Assigned by Supermicro

Description

A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with administrator privileges can upload a specially crafted image, which can cause a stack overflow due to the unchecked fat->fsd.max_fld.

Affected products

VendorProductAffectedFixed
SMCI MBD-X12DPG-OA6 1.04.16 —

References