Advisories · Technology
u-boot.
Every CVE that names u-boot among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 7.1 High
U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6
- u-boot
- Memory corruption
- CVSS 8.8 High
U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback
- u-boot
- Memory corruption
- CVSS 8.8 High
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
- u-boot
- CWE-195
- CVSS 8.8 High
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
- u-boot
- CWE-195
- CVSS 4.3 Medium
U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read
- u-boot
- Memory corruption
- CVSS 5.2 Medium
U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
- u-boot
- Memory corruption
- CVSS 6.0 Medium
U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder
- u-boot
- Memory corruption
- CVSS 8.8 High
U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly
- u-boot
- Memory corruption
- CVSS 8.8 High
U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK
- u-boot
- Memory corruption
- CVSS 8.7 High
U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()
- u-boot
- Memory corruption
- CVSS 6.9 Medium
U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c
- u-boot
- Memory corruption