CVE-2026-16671

The MCUboot bootloader contains an out-of-bounds stack write in the split_image_check() function located in boot/bootutil/src/loader.c. The vulnerability occurs because a fixed 32-byte buffer (loader_hash) is used to store image hashes, but the bootutil_img_validate() routine copies IMAGE_HASH_SI...