Vulnerabilidades em u-boot
11 resultadosAnálise Vexday
O U-Boot apresenta 3 vulnerabilidades na base, todas publicadas nos últimos 90 dias, indicando risco recente, mas nenhuma está sob exploração ativa confirmada (KEV) e sem severidade crítica identificada. A fraqueza dominante é CWE-120 (buffer overflow), típica de componentes de bootloader, recomendando atenção especial em ambientes de produção dependentes desta camada de boot.
CVE-2026-29009HIGHU-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINKEPSS 0.7%CVE-2026-29008HIGHU-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()EPSS 0.7%CVE-2026-29007MEDIUMU-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.cEPSS 0.7%CVE-2026-71971HIGHU-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment ReassemblyEPSS 0.4%CVE-2026-74221HIGHU-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINKEPSS 0.3%CVE-2026-74220HIGHU-Boot before 2026.10-rc5 Buffer Overflow via NFS READ ReplyEPSS 0.3%CVE-2026-74222HIGHU-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive CallbackEPSS 0.3%CVE-2026-74225HIGHU-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6EPSS 0.2%CVE-2026-71972MEDIUMU-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 DecoderEPSS 0.2%CVE-2026-71973MEDIUMU-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table AllocationEPSS 0.2%CVE-2026-71974MEDIUMU-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition ReadEPSS 0.2%