← Database

CVE-2021-37848

HIGH CVSS: 7.5 Published: 2021-08-02 Modified: 2026-06-17

Description

common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash comparison.

Affected Platforms

Pengutronix Barebox

Weakness Type

CWE-203

References