| Package | Affected versions | Patched versions |
|---|---|---|
| u-boot | ≤ 2020.01 |
In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an attacker to execute arbitrary code. NOTE: this vulnerablity was introduced when attempting to fix a memory leak identified by static analysis.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free