← Database

CVE-2021-37847

HIGH CVSS: 7.5 Published: 2021-08-02 Modified: 2026-06-17

Description

crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest verification.

Affected Platforms

Pengutronix Barebox

Weakness Type

NVD-CWE-noinfo

References