CVE-2026-127916

The MCUboot bootloader contains a vulnerability in bootutil_img_hash() where the image hash calculation spans a memory range that is not bounded against the flash slot. This occurs because the function sums ih_hdr_size, ih_img_size, and ih_protect_tlv_size from the image header without overflow c...