CVE-2014-4325

Name of the Vulnerable Software and Affected Versions Little Kernel (LK) bootloader (affected versions not specified)

Description The issue allows attackers to bypass intended device-lock and kernel-signature restrictions. This is achieved by using fastboot mode in a boot command for an arbitrary kernel image, exploiting the cmd boot function in app/aboot/aboot.c.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.