Login Request a demo
UB
Product
U-Boot
by denx · last CVE Jul 8, 2026
49
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities49In the news0Timeline
Severity mix
Critical 19High 18Medium 11Low 1
Severity
All severities49Critical19High18Medium11Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add U-Boot to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-29009
9.8
1%
Jul 8
U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK
Affected: before 2026.04; 2026.04; 2026.04; 2026.04
CVE-2022-34835
9.8
2%
Jun 30
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address…
Affected: before 2022.07; 2022.07; 2022.07; 2022.07; 2022.07; 2022.07
CVE-2022-30767
9.8
3%
May 16
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow
Affected: through 2022.04; 2022.07; 2022.07
CVE-2020-8432
9.8
3%
Jan 29
In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function
Affected: through 2020.01
CVE-2019-14204
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14203
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14202
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14201
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14200
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14199
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14198
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14196
9.8
2%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14195
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14194
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14193
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-14192
9.8
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
CVE-2019-11059
9.8
2%
May 10
Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow
Affected: 2016.11 through 2019.04; 2016.11; 2016.11; 2016.11
CVE-2018-18439
9.8
2%
Nov 20
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled
Affected: before 2018.09; 2018.09
CVE-2019-14197
9.1
3%
Jul 31
An issue was discovered in Das U-Boot through 2019.07
Affected: through 2019.07
Showing 19