CVE-2025-45512

The DENX Software Engineering Das U-Boot (U-Boot) v1.1.3 bootloader is vulnerable to arbitrary code execution due to a lack of signature verification . This flaw allows an attacker to install crafted firmware files on the target system. Proof of Concept (PoC) code exists which demonstrates multip...

CVE-2025-45512: Improper Neutralization of Special Elements used in a Command

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot U-Boot v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution...

CVE-2025-45512

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot U-Boot v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution...

CVE-2025-45512

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot U-Boot v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution...

CVE-2025-45512

A lack of signature verification in the bootloader of DENX Software Engineering Das U-Boot U-Boot v1.1.3 allows attackers to install crafted firmware files, leading to arbitrary code execution...

CVE-2025-31716

In bootloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed...

CVE-2025-31716

In bootloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed...

CVE-2025-31716

In bootloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed...

CVE-2025-31716

CVE-2025-31716 corresponds to a local out-of-bounds write in the bootloader caused by a missing bounds check, potentially leading to local denial of service. The vulnerability affects UNISOC bootloader implementations as described in multiple sources, with a CVSSv3.1 base score of 5.1 (Local acce...

CVE-2025-31716

In bootloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed...

CVE-2025-31716: Undefined Security Weakness

In bootloader, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed...

PT-2025-31609 · Unknown · Bootloader

Name of the Vulnerable Software and Affected Versions: bootloader affected versions not specified Description: A possible out-of-bounds write issue exists due to an incomplete bounds check in the bootloader. This could result in a local denial of service without requiring additional execution...

CVE-2023-28904

A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature verification and run arbitrary code in the infotainment system at boot process...

Volkswagen MIB3 Infotainment 安全漏洞

Volkswagen MIB3 Infotainment is an infotainment system on a vehicle from Volkswagen Germany. A security vulnerability exists in Volkswagen MIB3 Infotainment, which originates from a RAM buffer overflow in the bootloader component, which could allow a physically accessible attacker to bypass...

CVE-2023-28904: Buffer Copy without Checking Size of Input

A logic flaw leading to a RAM buffer overflow in the bootloader component of the MIB3 infotainment unit allows an attacker with physical access to the MIB3 ECU to bypass firmware signature verification and run arbitrary code in the infotainment system at boot process...

The vulnerability of the UFS loader component of the Grub2 operating system, which allows a hacker to trigger a service failure

The vulnerability of the UFS loader component in operating systems like Grub relates to writing beyond the boundary. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the gettext loader component in the Grub2 operating system allows a hacker to execute arbitrary code.

The vulnerability of the gettext loader component in operating system Grub is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of Grub2 operating system loaders, related to writing outside of the boundary, allows a perpetrator to trigger a service failure.

The vulnerability of the operating system bootloader Grub is related to writing beyond the boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

Astra Linux – Vulnerability in grub2

A flaw was discovered in grub2. When performing a symlink lookup from a ReiserFS filesystem, grub’s ReiserFS module uses user-controlled parameters from the filesystem’s geometry to determine the internal buffer size. However, it improperly checks for integer overflows. A maliciously crafted...

Pixel Watch Security Bulletin—June 2025Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel Watch Security Bulletin contains details of security vulnerabilities affecting Pixel Watch devices Google Devices. For Google devices, security patch levels of 2025-06-05 or later address all issues in this bulletin and all issues in the June 2025 Android Security Bulletin. To learn how...