CVE-2022-34835: denx u-boot Out-of-bounds Write
Vulnerability summary
CVE-2022-34835 is a critical (CVSS 9.8) Out-of-bounds Write vulnerability in denx u-boot. EPSS estimates a 2.30% chance of exploitation in the next 30 days, higher than 83.1% of scored vulnerabilities. 2 public exploits are recorded.
Advisory lineage
Upstream 0 · Downstream 5 · Related 4Timeline
- 29-06-2022PublishedVulnerability first disclosed.
- 12-05-2026Last modifiedVulnerability information updated.
Description
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
CVSS metrics
4 scores · 3 sources · 2 versions- OSV · UbuntuEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- OSV · DebianEcosystem advisory · calculated9.8CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
2.30%
Chance of exploitation in the next 30 days
Percentile
83%
Versus all other CVEs
30-day change
Increase +0.06 pp
From 2.24% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundU Boot
Maturity: poc
Exploit Reference (lists.denx.de)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Suse29 products
- u-boot-rpi3&distro=SUSE Enterprise Storage 6< 2019.01-150100.7.16.1
- u-boot-rpi3&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-ESPOS< 2019.01-150100.7.16.1
- u-boot-rpi3&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 2019.01-150100.7.16.1
- u-boot-rpi3&distro=SUSE Linux Enterprise Server 12 SP4-LTSS< 2018.03-4.9.1
- u-boot-rpi3&distro=SUSE Linux Enterprise Server 12 SP5< 2019.01-5.11.1
Opensuse2 products
- u-boot-xilinxzynqmpgeneric&distro=openSUSE Leap 15.3< 2020.01-150200.10.15.1
- u-boot-xilinxzynqmpgeneric&distro=openSUSE Leap 15.4< 2020.01-150200.10.15.1
Debian1 product
- u-boot< 2022.07+dfsg-1
Denx1 product
- u-boot< 2022.07 | 2022.07:rc1 | 2022.07:rc2 | 2022.07:rc3 | 2022.07:rc4 | 2022.07:rc5
Ubuntu1 product
- u-bootAll versions (No fix recorded) | < 2020.10+dfsg-1ubuntu0~18.04.3 | < 2021.01+dfsg-3ubuntu0~20.04.5 | < 2022.01+dfsg-2ubuntu2.3
5 vendors · 34 products
References
15 links- lists.denx.de/pipermail/u-boot/2022-June/486113.htmlX Refsource MISCREPORTExploitPatchVendor Advisory
- github.com/u-boot/u-boot/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409X Refsource MISCExploitPatchThird Party Advisory
- source.denx.de/u-boot/u-boot/-/commit/8f8c04bf1ebbd2f72f1643e7ad9617dafa6e5409X Refsource MISCPatchVendor Advisory
