UB
Product
u-boot
11
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 1High 6Medium 4Low 0
Watch
Add u-boot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-29009 | 9.8 | Jul 8 | U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK Affected: before 2026.07-rc2 |
| CVE-2026-74222 | 8.2 | Sep 29 | U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback Affected: before 2026.10-rc5 |
| CVE-2026-74221 | 8.2 | Sep 29 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK Affected: before 2026.10-rc5 |
| CVE-2026-74220 | 8.2 | Sep 29 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply Affected: before 2026.10-rc5 |
| CVE-2026-71971 | 8.2 | Sep 29 | U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly Affected: before 2026.10-rc3 |
| CVE-2026-29008 | 7.5 | Jul 8 | U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine() Affected: through 2026.04-rc3 |
| CVE-2026-74225 | 7.1 | Sep 29 | U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6 Affected: before 2026.10-rc5 |
| CVE-2026-71972 | 5.9 | Sep 29 | U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder Affected: through 2026.10-rc5 |
| CVE-2026-29007 | 5.3 | Jul 8 | U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c Affected: through 2026.04-rc3 |
| CVE-2026-71973 | 5.2 | Sep 29 | U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation Affected: before 2026.10-rc4 |
| CVE-2026-71974 | 4.8 | Sep 29 | U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read Affected: before 2026.10-rc3 |
Showing 11