u-boot

8 known vulnerabilities in u-boot, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-74225 CVSS 7.1 high U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID…
  • CVE-2026-74222 CVSS 8.8 high U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation…
  • CVE-2026-74221 CVSS 8.8 high U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server…
  • CVE-2026-74220 CVSS 8.8 high U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt…
  • CVE-2026-71974 CVSS 4.3 medium U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size…
  • CVE-2026-71973 CVSS 5.2 medium U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs_read_directory_table() function when allocating the directory…
  • CVE-2026-71972 CVSS 6.0 medium U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in…
  • CVE-2026-71971 CVSS 8.8 high U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bounds write vulnerability in the __net_defragment() function…