Skip to content
Uu-boot
Products
| Product | CVEs | Exploited | Latest |
| u-boot | 11 | – | Sep 29, 2026 |
Exploited and recent CVEs
-
CVE-2026-74225
High 7.1
U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6
0.2%
-
CVE-2026-74222
High 8.2
U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback
0.3%
-
CVE-2026-74221
High 8.2
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
0.3%
-
CVE-2026-74220
High 8.2
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
0.3%
-
CVE-2026-71974
Medium 4.8
U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read
0.2%
-
CVE-2026-71973
Medium 5.2
U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
0.2%
-
CVE-2026-71972
Medium 5.9
U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder
0.2%
-
CVE-2026-71971
High 8.2
U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly
0.4%
-
CVE-2026-29009
High 8.2
U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK
0.7%
-
CVE-2026-29008
High 7.5
U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()
0.7%
-
CVE-2026-29007
Medium 5.3
U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c
0.7%