TI-2022-02168 CVE-2022-2347 · GHSA-57ww-qgjv-3g3c
Unchecked Download size in Uboot
Priority HIGH 69
There exists an unchecked length field in UBoot.
u-boot
Records57All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical18CVSS 9.0–10.0
CVSS high28CVSS 7.0–8.9
Exploited now
u-boot records in CISA KEVNo u-boot vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
49 records in U-boot · all components
TI-2025-28794 CVE-2025-45512 · GHSA-xw32-c3jc-v6qh
A lack of signature verification in the bootloader of DENX Software Engineering Das…
Priority MEDIUM 64
A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution.
TI-2020-06770 CVE-2020-8432 · GHSA-j5r3-pwr2-9cqj
In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c…
Priority MEDIUM 48
In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function.
TI-2022-12898 CVE-2022-30767 · GHSA-27g3-5ffj-8mw8
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has…
Priority MEDIUM 47
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow.
TI-2019-10569 CVE-2019-14204 · GHSA-cxgc-6jc8-chjx
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10568 CVE-2019-14203 · GHSA-jfjv-fh74-wcf5
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10567 CVE-2019-14202 · GHSA-hwxc-47w3-hfx5
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10566 CVE-2019-14201 · GHSA-53f4-chhq-x6q5
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10565 CVE-2019-14200 · GHSA-x4xm-29c6-qvf5
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10564 CVE-2019-14199 · GHSA-hv5p-q6m7-g94m
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10563 CVE-2019-14198 · GHSA-x53c-3c7r-79j9
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10560 CVE-2019-14195 · GHSA-rcc4-42qj-g2jr
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10559 CVE-2019-14194 · GHSA-jx53-j6xc-p3r6
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10558 CVE-2019-14193 · GHSA-x3rh-6g9g-gp22
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-10557 CVE-2019-14192 · GHSA-mf7g-4632-2pqg
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 47
An issue was discovered in Das U-Boot through 2019.07.
TI-2022-15641 CVE-2022-34835 · GHSA-9gfq-p9vq-r563
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based…
Priority MEDIUM 46
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
TI-2019-10561 CVE-2019-14196 · GHSA-pvgx-mr5j-54w6
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 46
An issue was discovered in Das U-Boot through 2019.07.
TI-2019-08268 CVE-2019-11059 · GHSA-4269-qr56-7rgx
Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.
Priority MEDIUM 46
Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.
TI-2018-13039 CVE-2018-18439 · GHSA-vqxq-jmxf-f53r
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a…
Priority MEDIUM 46
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled.
TI-2026-23177 CVE-2026-29009 · GHSA-rqrq-75p3-gc68
U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK
Priority MEDIUM 45
U-Boot before 2026.07-rc2 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte nfs_p…
TI-2026-23176 CVE-2026-29008 · GHSA-3qwj-q697-4ppr
U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()
Priority MEDIUM 45
U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcp_rx_state_machine() function (net/tcp.c) that allows a network-adjacent attacker to crash the bootloader by sending a malformed TCP SYN+ACK…
TI-2019-10562 CVE-2019-14197 · GHSA-59rm-h66v-qr84
An issue was discovered in Das U-Boot through 2019.07.
Priority MEDIUM 44
An issue was discovered in Das U-Boot through 2019.07.
TI-2026-34353 CVE-2026-46728 · GHSA-5cv5-vm4q-7wmx
Origin validation error in U-Boot
Priority LOW 39
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
TI-2026-23175 CVE-2026-29007 · GHSA-572m-4pr8-48pj
U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c
Priority LOW 38
U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcp_rx_state_machine() (net/tcp.c) when CONFIG_PROT_TCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafting a…
TI-2019-09812 CVE-2019-13106 · GHSA-r4g9-3p6p-387v
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading…
Priority LOW 38
Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.