CVE-2022-38696

A memory buffer overflow vulnerability exists in BootRom due to missing validation of payload size. An attacker can exploit this without special privileges, potentially causing system crash or unauthorized code execution during the boot process.

BootRom fails to validate payload size before writing to a fixed buffer, enabling stack/heap buffer overflow (CWE-119). Exploitation requires ability to supply a malicious payload during boot, with no privilege escalation needed; impact includes arbitrary code execution or denial of service.