UB
Product
u-boot
11
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 1High 6Medium 4Low 0
Watch
Add u-boot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-74222 | 8.2 | Sep 29 | U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback Affected: before 2026.10-rc5 |
| CVE-2026-74221 | 8.2 | Sep 29 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK Affected: before 2026.10-rc5 |
| CVE-2026-74220 | 8.2 | Sep 29 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply Affected: before 2026.10-rc5 |
| CVE-2026-71971 | 8.2 | Sep 29 | U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly Affected: before 2026.10-rc3 |
| CVE-2026-29008 | 7.5 | Jul 8 | U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine() Affected: through 2026.04-rc3 |
| CVE-2026-74225 | 7.1 | Sep 29 | U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6 Affected: before 2026.10-rc5 |
Showing 6