EUVD-2026-89432

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

CVE-2026-71974

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

CVE-2026-71974 U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

CVE-2026-71974 U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in readslottedpartition that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on...

CVE-2026-71974

U-Boot versions prior to 2026.10-rc3 are vulnerable to an out-of-bounds write in the read_slotted_partition() function. The flaw exists because the system fails to validate image sizes against partition bounds. An attacker with physical access can exploit this by providing crafted boot media cont...