CVE-2024-10238 — fld->used_bytes without sanity check causes stack overflow
A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6. An attacker can upload a specially crafted image that will cause a stack over…
Published: 2025-02-04 · CVSS: 7.2 · CVSS 3.1
A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6. An attacker can upload a specially crafted image that will cause a stack overflow is caused by not checking fld->used_bytes.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7