CVE-2026-16659

The MCUboot bootloader contains a pre-authentication NULL pointer dereference within the bs_upload() handler in boot/boot_serial/src/boot_serial.c. The vulnerability occurs because the fap pointer is initialized to NULL and only assigned via flash_area_open(). Specific validation failures (malfor...