Skip to content
Pengutronix vulnerabilities
Newest
-
barebox
barebox EFI PE Loader Memory Safety Vulnerabilities
CVE-2026-34963
8.6 High
-
barebox
barebox ext4 Directory Parsing Infinite Loop Denial of Service
CVE-2026-34962
6.9 Medium
-
barebox
barebox ext4 Extent Parsing Out-of-Bounds Read
CVE-2026-34961
6.9 Medium
-
barebox
barebox Out-of-Bounds Read in DHCP Option Parsing
CVE-2026-34960
7.1 High
-
pengutronix rauc
RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB
CVE-2026-34155
Fix available
7.2 High
-
barebox
barebox: FIT Signature Verification Bypass Vulnerability
CVE-2026-33243
Fix available
8.3 High
-
barebox
In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one...
CVE-2024-57262
7.1 High
-
barebox
In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related...
CVE-2024-57261
7.1 High
-
pengutronix barebox
common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because...
CVE-2021-37848
7.5 High
-
pengutronix barebox
crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp...
CVE-2021-37847
7.5 High
-
pengutronix rauc
The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on an update file takes place before the fil…
CVE-2020-25860
Public exploitFix available
6.6 Medium
-
pengutronix barebox
Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c...
CVE-2020-13910
9.1 Critical
-
pengutronix barebox
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net...
CVE-2019-15937
9.8 Critical
-
pengutronix barebox
Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs...
CVE-2019-15938
9.8 Critical