Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: u-boot 2026.10-rc5 Clear all filters
TI-2026-52019 CVE-2026-74225 · GHSA-c478-wgg8-3gvq

U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6

Priority LOW 31

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets.

CVSS 4.0HIGH 7.1 Adjacent network No auth No interaction EPSS 0.00229 Published 2026-09-29 Fixed in 2026.10-rc5 CWE-787
TI-2026-52017 CVE-2026-74221 · GHSA-r9ch-9wx4-f978

U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK

Priority MEDIUM 44

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00339 Published 2026-09-29 Fixed in 2026.10-rc5 CWE-195
TI-2026-52016 CVE-2026-74220 · GHSA-63gj-h865-3h3j

U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply

Priority MEDIUM 44

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00334 Published 2026-09-29 Fixed in 2026.10-rc5 CWE-195