U-Boot verified boot bypass vulnerabilities (CVE-2018-18439, CVE-2018-18440)

Multiple techniques have been identified that allow to execute arbitrary code, within a running U-Boot instance, by means of externally provided unauthenticated data. [...] ...