898 matches found
CVE-2025-45512
Guida all'uso del PoC di Exploit per U-Boot 1.1.3 Introduzione Questo Proof of Concept PoC è stato creato per verificare vulnerabilità nel bootloader U-Boot versione 1.1.3 compilato il 27 agosto 2019. Il codice implementa cinque diverse vulnerabilità pertinenti alle categorie della OWASP IoT...
CVE-2025-70290
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...
provisioner
Provisioner Panoramica Provisioner è un assistente di provisioning orientato agli sviluppatori per computer a scheda singola SBC, in particolare piattaforme basate su U-Boot. Fornisce un ambiente autonomo per: Accedere alle schede in remoto Automatizzare i flussi di lavoro di avvio Provisionare...
Xiaomi-C200-Firmware-Analysis
Der Umfang In diesem Repository zeige ich, wie ich Zugang zur UART-Schnittstelle erhalten habe, selbst ohne die üblichen freiliegenden Pins/Testpads. Dabei nutze ich U-Boot und Tricks, um frühzeitig Root-Zugriff zu erlangen und schließlich die Firmware zu dumpen. Erste Erkundung Einige wichtige...
CVE-2025-70293
An integer overflow vulnerability exists in Denx U-Boot prior to version 2026.04 , specifically in the function ext4fs_get_bgdtable . The flawed size calculation can result in an underallocated buffer that is subsequently passed to memcpy(), potentially leading to arbitrary code execution , denia...
CVE-2025-70290
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...
EUVD-2025-210792
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fsgetbgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy which could lead to arbitrary code execution, a denial of service,...
CVE-2025-70290
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...
EUVD-2025-210793
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or...
chipicopwn
chipicopwn Exploit del bootloader per Google Nest Hub 2ª generazione elaine requisiti Google Nest Hub 2ª generazione Raspberry Pi Pico Hub USB alimentato o cavo USB a Y pico-sdk vedi la guida introduttiva per le istruzioni di installazione versioni supportate firmware di fabbrica 2020/12 - U-Boot...
PT-2026-62419
Name of the Vulnerable Software and Affected Versions Autel Maxi Charger Single versions prior to V1.03.52 Description The device exposes an accessible UART Universal Asynchronous Receiver-Transmitter, a hardware communication protocol interface. This allows an attacker with physical access to...
CVE-2026-29008
A flaw was found in U-Boot. A network-adjacent attacker can exploit an integer underflow vulnerability in the tcprxstatemachine function by sending a specially crafted TCP SYN+ACK packet. This can cause the bootloader to crash, leading to a Denial of Service DoS and preventing the device from...
SUSE CVE-2026-29007
U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcprxstatemachine net/tcp.c when CONFIGPROTTCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafting a malicious packet with a mismatched IP total length and TCP data offset field. Attacke...
SUSE CVE-2026-29009
U-Boot before 2026.07-rc2 contains a buffer overflow vulnerability in nfsreadlinkreply net/nfs-common.c when CONFIGCMDNFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte nfspathbuff buffer by returning multiple relative symlink targets that are appended withou...
Linux Distros Unpatched Vulnerability : CVE-2026-29007
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcprxstatemachine net/tcp.c when CONFIGPROTTCP is enabled, allowing remote attackers ...
DEBIAN-CVE-2026-29008
U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcprxstatemachine function net/tcp.c that allows a network-adjacent attacker to crash the bootloader by sending a malformed TCP SYN+ACK packet with a manipulated data offset field causing payloadlen to become negative...
CVE-2026-29009
U-Boot before 2026.07-rc2 contains a buffer overflow vulnerability in nfsreadlinkreply net/nfs-common.c when CONFIGCMDNFS is enabled, allowing a malicious or compromised NFS server to overflow the 2048-byte nfspathbuff buffer by returning multiple relative symlink targets that are appended withou...
DEBIAN-CVE-2026-29007
U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcprxstatemachine net/tcp.c when CONFIGPROTTCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafting a malicious packet with a mismatched IP total length and TCP data offset field. Attacke...
CVE-2026-29007
U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcprxstatemachine net/tcp.c when CONFIGPROTTCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafting a malicious packet with a mismatched IP total length and TCP data offset field. Attacke...
UBUNTU-CVE-2026-29008
U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcprxstatemachine function net/tcp.c that allows a network-adjacent attacker to crash the bootloader by sending a malformed TCP SYN+ACK packet with a manipulated data offset field causing payloadlen to become negative...