CVE-2022-38161

Description

The Gumstix Overo SBC on the VSKS board through 2022-08-09, as used on the Orlan-10 and other platforms, allows unrestricted remapping of the NOR flash memory containing the bitstream for the FPGA.

Affected Platforms

Weakness Type

CWE-119

References

• https://github.com/subreption/birdwatch-report-1-repo
• https://subreption.com/downloads/reports/demystifying-the-orlan-10_opt.pdf
• https://subreption.com/press-releases/2022-birdwatch-first-report/
• https://github.com/subreption/birdwatch-report-1-repo
• https://subreption.com/downloads/reports/demystifying-the-orlan-10_opt.pdf
• https://subreption.com/press-releases/2022-birdwatch-first-report/