When booting a Zync-7000 SOC device from nand flash memory, the nand driver in the ROM does not validate the inputs when reading in any parameters in the nand’s parameter page. IF a field read in from the parameter page is too large, this causes a buffer overflow that could lead to arbitrary code execution. Physical access and modification of the board assembly on which the Zynq-7000 SoC device mounted is needed to replace the original NAND flash memory with a NAND flash emulation device for this attack to be successful.
References
| Link | Resource |
|---|---|
| http://www.onfi.org/specifications | Not Applicable |
| https://www.xilinx.com/products/silicon-devices/soc/zynq-7000.html | Product Vendor Advisory |
| https://www.xilinx.com/support/answers/76201.html | Vendor Advisory |
| http://www.onfi.org/specifications | Not Applicable |
| https://www.xilinx.com/products/silicon-devices/soc/zynq-7000.html | Product Vendor Advisory |
| https://www.xilinx.com/support/answers/76201.html | Vendor Advisory |
Configurations
History
21 Nov 2024, 05:57
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.onfi.org/specifications - Not Applicable | |
| References | () https://www.xilinx.com/products/silicon-devices/soc/zynq-7000.html - Product, Vendor Advisory | |
| References | () https://www.xilinx.com/support/answers/76201.html - Vendor Advisory |
Information
Published : 2021-03-15 13:15
Updated : 2024-11-21 05:57
NVD link : CVE-2021-27208
Mitre link : CVE-2021-27208
CVE.ORG link : CVE-2021-27208
JSON object : View
Products Affected
xilinx
- zynq-7000s
- zynq-7000
- zynq-7000s_firmware
- zynq-7000_firmware
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')