[ Vendor · 8 CVEs ]
u-boot
CVEs affecting u-boot published in the last 30 days, plus any u-boot CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-74220 | 29 Sep 2026 | CVSS 8.2 | u-bootU-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by… | |
| CVE-2026-74221 | 29 Sep 2026 | CVSS 8.2 | u-bootU-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses. A… | |
| CVE-2026-74222 | 29 Sep 2026 | CVSS 8.2 | u-bootU-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data… | |
| CVE-2026-74225 | 29 Sep 2026 | CVSS 7.1 | u-bootU-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths… | |
| CVE-2026-71973 | 29 Sep 2026 | CVSS 5.2 | u-bootU-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when allocating the directory table… | |
| CVE-2026-71974 | 29 Sep 2026 | CVSS 4.8 | u-bootU-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size against… | |
| CVE-2026-71971 | 29 Sep 2026 | CVSS 8.2 | u-bootU-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function in… | |
| CVE-2026-71972 | 29 Sep 2026 | CVSS 5.9 | u-bootU-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in drivers/video/video_bmp.c… |