Vulnerability · Published Mar 15, 2021 · Assigned by mitre
CVE-2021-27208
Medium 6.8
In plain English
A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Official description
When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code execution. Physical access and modification of the board assembly on which the Zynq-7000 SoC device mounted is needed to replace the original NAND flash memory with a NAND flash emulation device for this attack to be successful.
Affected products (as reported)
References
- https://www.xilinx.com/products/silicon-devices/soc/zynq-7000.html x_refsource_MISC
- https://www.xilinx.com/support/answers/76201.html x_refsource_MISC
- http://www.onfi.org/specifications x_refsource_MISC