U-boot vulnerabilities

Products

• U-boot 11

Newest

• denx software engineering u-boot U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6 CVE-2026-74225 Fix available 7.1 HighSeptember 29, 2026
• denx software engineering u-boot U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback CVE-2026-74222 Fix available 8.8 HighSeptember 29, 2026
• denx software engineering u-boot U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK CVE-2026-74221 Fix available 8.8 HighSeptember 29, 2026
• denx software engineering u-boot U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply CVE-2026-74220 Fix available 8.8 HighSeptember 29, 2026
• denx software engineering u-boot U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read CVE-2026-71974 4.3 MediumSeptember 29, 2026
• denx software engineering u-boot U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation CVE-2026-71973 5.2 MediumSeptember 29, 2026
• denx software engineering u-boot U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder CVE-2026-71972 6.0 MediumSeptember 29, 2026
• denx software engineering u-boot U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly CVE-2026-71971 Fix available 8.8 HighSeptember 29, 2026
• denx u-boot U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK CVE-2026-29009 Fix available 8.8 HighJuly 8, 2026
• denx u-boot U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine() CVE-2026-29008 8.7 HighJuly 8, 2026
• denx u-boot U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c CVE-2026-29007 6.9 MediumJuly 8, 2026