PT-2026-81214

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc5 Description An out-of-bounds memory access exists in the dhcp6 parse options function. The issue occurs because the system fails to validate the lengths of the SERVERID and CLIENTID options within DHCPv6...

PT-2026-81207

U-Boot before 2026.10-rc4 contains an integer overflow vulnerability in sqfs read directory table function when allocating the directory table buffer. Attackers can supply a crafted SquashFS image with an attacker-controlled superblock metablks count value that causes heap buffer under-allocation...