u-boot

Products

ProductCVEsExploitedLatest
u-boot11–Sep 29, 2026

Exploited and recent CVEs

  • CVE-2026-74225 High 7.1 U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6 0.2%
  • CVE-2026-74222 High 8.2 U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback 0.3%
  • CVE-2026-74221 High 8.2 U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK 0.3%
  • CVE-2026-74220 High 8.2 U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply 0.3%
  • CVE-2026-71974 Medium 4.8 U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read 0.2%
  • CVE-2026-71973 Medium 5.2 U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation 0.2%
  • CVE-2026-71972 Medium 5.9 U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder 0.2%
  • CVE-2026-71971 High 8.2 U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly 0.4%
  • CVE-2026-29009 High 8.2 U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK 0.7%
  • CVE-2026-29008 High 7.5 U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine() 0.7%
  • CVE-2026-29007 Medium 5.3 U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c 0.7%