u-boot vulnerabilities

Newest CVEs

• CVE-2026-74225

  U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6

  u-boot · u-boot

  High7.1
• CVE-2026-74222

  U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback

  u-boot · u-boot

  High8.8
• CVE-2026-74221

  U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK

  u-boot · u-boot

  High8.8
• CVE-2026-74220

  U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply

  u-boot · u-boot

  High8.8
• CVE-2026-71974

  U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read

  u-boot · u-boot

  Medium4.3
• CVE-2026-71973

  U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation

  u-boot · u-boot

  Medium5.2
• CVE-2026-71972

  U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder

  u-boot · u-boot

  Medium6.0
• CVE-2026-71971

  U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly

  u-boot · u-boot

  High8.8
• CVE-2026-29009

  U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK

  u-boot · u-boot

  High8.8
• CVE-2026-29008

  U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()

  u-boot · u-boot

  High8.7