CVE-2020-8432

Name of the Vulnerable Software and Affected Versions Das U-Boot versions through 2020.01

Description A double free issue has been found in the do rename gpt parts() function, located in cmd/gpt.c. This issue may result in a write-what-where condition, allowing an attacker to execute arbitrary code. The vulnerability was introduced while attempting to fix a memory leak identified by static analysis.

Recommendations For Das U-Boot versions through 2020.01, as a temporary workaround, consider disabling the do rename gpt parts() function until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.