In the bootloader download module, there is a possible out-of-bounds write due to a failure to…

What to know

What it is

In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.

Affected

See advisory

Fix

Apply the vendor's security update; see the linked advisory.

Exploitation

No known exploitation