1180 matches found
CVE-2026-46728
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
SUSE CVE-2026-46728
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
Linux Distros Unpatched Vulnerability : CVE-2026-46728
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash. CVE-2026-46728 Note that Nessus...
DEBIAN-CVE-2026-46728
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
CVE-2026-46728
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
CVE-2026-46728
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
CVE-2026-46728
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
CVE-2026-46728
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
DENX Software Engineering Das U-Boot 访问控制错误漏洞
DENX Software Engineering's Das U-Boot is a general-purpose bootloader developed by the German company DENX Software Engineering. Versions of DENX Software Engineering's Das U-Boot prior to version 2026.04 contained an access control vulnerability. This vulnerability stemmed from the omission of...
CVE-2026-46728: Origin Validation Error
Das U-Boot before 2026.04 allows FIT Flat Image Tree signature verification bypass because hashed-nodes is omitted from a hash...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: uboot-tools (UTSA-2026-016520)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-016520 advisory. Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 3861aa5 up to today on any platform allows an attacker on the local...
u-boot:fuzz_efi_load_image: Crash in mbedtls_internal_sha256_process
Detailed Report: https://oss-fuzz.com/testcase?key=4840248550162432 Project: u-boot Fuzzing Engine: libFuzzer Fuzz Target: fuzzefiloadimage Job Type: libfuzzerasanu-boot Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x000020401000 Crash State: mbedtlsinternalsha256process...
u-boot:fuzz_efi_load_image: Crash in efi_load_pe
Detailed Report: https://oss-fuzz.com/testcase?key=4677271440130048 Project: u-boot Fuzzing Engine: libFuzzer Fuzz Target: fuzzefiloadimage Job Type: libfuzzerasanu-boot Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x790bcabe057f Crash State: efiloadpe efiloadimage fuzzefiloadimage...
u-boot:fuzz_fit_image_load: Heap-buffer-overflow in fdt_check_full
Detailed Report: https://oss-fuzz.com/testcase?key=5208350320295936 Project: u-boot Fuzzing Engine: libFuzzer Fuzz Target: fuzzfitimageload Job Type: libfuzzerasanu-boot Platform Id: linux Crash Type: Heap-buffer-overflow READ 8 Crash Address: 0x7898b90e750c Crash State: fdtcheckfull fitcheckform...
u-boot:fuzz_image_decomp: Heap-buffer-overflow in lzmaBuffToBuffDecompress
Detailed Report: https://oss-fuzz.com/testcase?key=5019466785423360 Project: u-boot Fuzzing Engine: libFuzzer Fuzz Target: fuzzimagedecomp Job Type: libfuzzerasanu-boot Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x7726fc3e00b6 Crash State: lzmaBuffToBuffDecompress...
Ubuntu: Security Advisory (USN-8056-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2023-50810
In certain Sonos products before Sonos S1 Release 11.12 and S2 release 15.9, a vulnerability exists in the U-Boot component of the firmware that allow persistent arbitrary code execution with Linux kernel privileges. A failure to correctly handle the return value of the setenv command can be used...
CVE-2022-33967
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service DoS condition or arbitrary code...
CVE-2019-11690
genranduuid in lib/uuid.c in Das U-Boot v2014.04 through v2019.04 lacks an srand call, which allows attackers to determine UUID values in scenarios where CONFIGRANDOMUUID is enabled, and Das U-Boot is relied upon for UUID values of a GUID Partition Table of a boot device...