EUVD-2026-124813

splitimagecheck in boot/bootutil/src/loader.c declares a fixed uint8t loaderhash32 buffer and passes it as the outhash out-parameter to bootutilimgvalidate. That routine copies IMAGEHASHSIZE bytes into outhash memcpyouthash, hash, IMAGEHASHSIZE in boot/bootutil/src/imagevalidate.c, where...

PT-2026-146111

MCUboot's serial-recovery image-upload handler bs upload in boot/boot serial/src/boot serial.c declares const struct flash area fap = NULL and assigns it only via flash area open part-way through the function. Two early validation failures goto out invalid data — a CBOR map that fails to decode, ...

PT-2026-146114

split image check in boot/bootutil/src/loader.c declares a fixed uint8 t loader hash32 buffer and passes it as the out hash out-parameter to bootutil img validate. That routine copies IMAGE HASH SIZE bytes into out hash memcpyout hash, hash, IMAGE HASH SIZE in boot/bootutil/src/image validate.c,...

CVE-2025-62235 Apache Mynewt NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing

Authentication Bypass by Spoofing vulnerability in Apache NimBLE. Receiving specially crafted Security Request could lead to removal of original bond and re-bond with impostor. This issue affects Apache NimBLE: through 1.8.0. Users are recommended to upgrade to version 1.9.0, which fixes the issu...

Apache NimBLE security vulnerability

Apache NimBLE is an open source Bluetooth 5.4 stack host and controller from the Apache Foundation, USA, that completely replaces the proprietary SoftDevice on Nordic chipsets.It is part of the Apache Mynewt project. Apache NimBLE suffers from a buffer overflow vulnerability that can be exploited...