VendorsDenxu-boot2026.04
Vulnerabilities

Denx U-Boot 2026.04

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

4CVEs
CVE-2026-29009
U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK
Published 2026-07-08 · Modified
9.8EPSS 0.007
CVE-2026-46728
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Published 2026-05-16 · Analyzed
8.8EPSS 0.001
CVE-2026-29008
U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()
Published 2026-07-08 · Analyzed
8.7EPSS 0.007
CVE-2026-29007
U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c
Published 2026-07-08 · Analyzed
6.9EPSS 0.007