What’s Vulnerable › Products
u-boot vulnerabilities
58 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 20 published in the last 12 months.
Check whether your u-boot version is affected
Latest u-boot vulnerabilities
- CVE-2026-74225 — U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6 (CVSS 7.1)
- CVE-2026-74222 — U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback (CVSS 8.2)
- CVE-2026-74221 — U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK (CVSS 8.2)
- CVE-2026-74220 — U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply (CVSS 8.2)
- CVE-2026-71974 — U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read (CVSS 4.8)
- CVE-2026-71973 — U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation (CVSS 5.2)
- CVE-2026-71972 — U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder (CVSS 5.9)
- CVE-2026-71971 — U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly (CVSS 8.2)
- CVE-2026-29009 — U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK (CVSS 9.8)
- CVE-2026-29008 — U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine() (CVSS 7.5)
- CVE-2026-29007 — U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c (CVSS 5.3)
- CVE-2026-46728 — (CVSS 8.8)
- CVE-2025-24857 — (CVSS 7.6)
- CVE-2025-45512 — (CVSS 6.5)
- CVE-2024-57259 — (CVSS 6.8)
- CVE-2024-57258 — (CVSS 7.8)
- CVE-2024-57257 — (CVSS 2.4)
- CVE-2024-57256 — (CVSS 6.8)
- CVE-2024-57255 — (CVSS 6.8)
- CVE-2024-57254 — (CVSS 6.8)
- CVE-2024-42040 — (CVSS 8.1)
- CVE-2019-6268 — (CVSS 7.5)
- CVE-2022-2347 — Unchecked Download size in Uboot (CVSS 7.1)
- CVE-2022-33967 — (CVSS 7.8)
- CVE-2022-33103 — (CVSS 7.8)