CVE-2018-1000205

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-06-26 · updated 2026-06-17
Weakness: CWE-20

Description

U-Boot contains a CWE-20: Improper Input Validation vulnerability in Verified boot signature validation that can result in Bypass verified boot. This attack appear to be exploitable via Specially crafted FIT image and special device memory functionality.

Affected products

u-boot: through 2018.07

References

https://lists.denx.de/pipermail/u-boot/2018-June/330454.html
https://lists.denx.de/pipermail/u-boot/2018-June/330898.html
https://lists.denx.de/pipermail/u-boot/2018-June/330454.html
https://lists.denx.de/pipermail/u-boot/2018-June/330898.html

Get alerted when CVE-2018-1000205 or the next vulnerability affects your stack