Threats tagged 'ghsa-fwvg-qqfx-4m7g'

MCUboot contains a vulnerability in its serial-recovery image-upload handler bs_upload() when built with encrypted images enabled (MCUBOOT_ENC_IMAGES) on Zephyr or Mynewt ports. A malformed initial serial-recovery upload command can cause a NULL pointer dereference leading to a transient denial of service (DoS) of the bootloader during recovery. This occurs because early validation failures skip initialization of a flash_area pointer, which is then dereferenced unconditionally. The vulnerability does not lead to memory corruption or information disclosure and requires a non-default build configuration with encryption and serial recovery enabled.