CVE-2024-10239 — fld->used_bytes without sanity check causes stack overflow
A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with administrator privileges can upload a specially crafted image,…
Published: 2025-02-04 · CVSS: 7.2 · CVSS 3.1
A security issue in the firmware image verification implementation at Supermicro MBD-X12DPG-OA6 . An attacker with administrator privileges can upload a specially crafted image, which can cause a stack overflow due to the unchecked fat->fsd.max_fld.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7