UB
Product
u-boot
11
CVEs
0
On KEV
9.8
Max CVSS
8
New 30D
Severity mix
Critical 1High 6Medium 4Low 0
Watch
Add u-boot to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-71972 | 5.9 | Sep 29 | U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder Affected: through 2026.10-rc5 |
| CVE-2026-29007 | 5.3 | Jul 8 | U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c Affected: through 2026.04-rc3 |
| CVE-2026-71973 | 5.2 | Sep 29 | U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation Affected: before 2026.10-rc4 |
| CVE-2026-71974 | 4.8 | Sep 29 | U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read Affected: before 2026.10-rc3 |
Showing 4