Pengutronix Barebox vulnerabilities

• barebox barebox EFI PE Loader Memory Safety Vulnerabilities CVE-2026-34963 8.6 HighMay 11, 2026
• barebox barebox ext4 Directory Parsing Infinite Loop Denial of Service CVE-2026-34962 6.9 MediumMay 11, 2026
• barebox barebox ext4 Extent Parsing Out-of-Bounds Read CVE-2026-34961 6.9 MediumMay 11, 2026
• barebox barebox Out-of-Bounds Read in DHCP Option Parsing CVE-2026-34960 7.1 HighMay 11, 2026
• barebox barebox: FIT Signature Verification Bypass Vulnerability CVE-2026-33243 Fix available 8.3 HighMarch 20, 2026
• barebox In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one... CVE-2024-57262 7.1 HighFebruary 19, 2025
• barebox In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related... CVE-2024-57261 7.1 HighFebruary 19, 2025
• pengutronix barebox common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because... CVE-2021-37848 7.5 HighAugust 2, 2021
• pengutronix barebox crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp... CVE-2021-37847 7.5 HighAugust 2, 2021
• pengutronix barebox Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c... CVE-2020-13910 9.1 CriticalJune 7, 2020
• pengutronix barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net... CVE-2019-15937 9.8 CriticalSeptember 5, 2019
• pengutronix barebox Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs... CVE-2019-15938 9.8 CriticalSeptember 5, 2019