Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

U-Boot — Vulnerabilities & Security Advisories 21

All 21 CVE vulnerabilities found in U-Boot, with AI-generated Chinese analysis, references, and POCs.

This page aggregates security vulnerabilities associated with the U-Boot bootloader, a widely used open-source firmware for embedded systems. The collection encompasses various weakness types, including buffer overflows, integer overflows, and improper input validation, spanning a historical range from the project's inception to recent disclosures. Readers can utilize this resource to track vendor advisories, understand specific weakness classes within the embedded ecosystem, and review the complete vulnerability history of this critical boot component. The data is organized to facilitate technical analysis, allowing security professionals and developers to identify patterns in reported flaws without the noise of marketing language. By centralizing these records, the page serves as a neutral reference point for assessing risk exposure in devices relying on U-Boot. It does not provide remediation steps but offers a factual overview of known issues, enabling users to correlate specific CVEs with broader trends in bootloader security. This aggregation supports due diligence for organizations deploying U-Boot-based hardware, ensuring that teams have access to a consolidated view of past and present security concerns. The focus remains strictly on the technical characteristics of the vulnerabilities, their affected versions, and their classification within standard vulnerability taxonomies.

Vendor: Das

CVE ID Title CVSS Severity Published
CVE-2026-74225 U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6 CWE-787 7.1 High 2026-09-29
CVE-2026-74222 U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback CWE-416 8.2 High 2026-09-29
CVE-2026-74220 U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply CWE-195 8.2 High 2026-09-29
CVE-2026-74221 U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK CWE-195 8.2 High 2026-09-29
CVE-2026-71974 U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read CWE-787 4.8 Medium 2026-09-29
CVE-2026-71972 U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder CWE-787 5.9 Medium 2026-09-29
CVE-2026-71973 U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation CWE-190 5.2 Medium 2026-09-29
CVE-2026-71971 U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly CWE-787 8.2 High 2026-09-29
CVE-2026-29009 U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK CWE-120 8.2 High 2026-07-08
CVE-2026-29008 U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine() CWE-191 7.5 High 2026-07-08
CVE-2026-29007 U-Boot 2026.04-rc3 Out-of-Bounds Read in tcp_rx_state_machine via tcp.c CWE-125 5.3 Medium 2026-07-08
CVE-2026-46728 DENX Software Engineering Das U-Boot 访问控制错误漏洞 CWE-346 8.2 High 2026-05-16
CVE-2024-57259 DENX Software Engineering Das U-Boot 安全漏洞 CWE-193 7.1 High 2025-02-18
CVE-2024-57257 DENX Software Engineering Das U-Boot 安全漏洞 CWE-674 2.0 Low 2025-02-18
CVE-2024-57258 DENX Software Engineering Das U-Boot 安全漏洞 CWE-190 7.1 High 2025-02-18
CVE-2024-57255 DENX Software Engineering Das U-Boot 安全漏洞 CWE-190 7.1 High 2025-02-18
CVE-2024-57256 DENX Software Engineering Das U-Boot 安全漏洞 CWE-190 7.1 High 2025-02-18
CVE-2024-57254 DENX Software Engineering Das U-Boot 安全漏洞 CWE-190 7.1 High 2025-02-18
CVE-2022-33967 DENX U-Boot 缓冲区错误漏洞 7.8 - 2022-07-20
CVE-2017-3225 Das U-Boot's AES-CBC encryption feature uses a zero (0) initialization vector that may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data CWE-329 3.9 - 2018-07-24
CVE-2017-3226 Das U-Boot's AES-CBC encryption feature improperly handles an error condition and may allow attacks against the underlying cryptographic implementation and allow an attacker to decrypt the data CWE-329 6.4 - 2018-07-24

All 21 known CVE vulnerabilities affecting U-Boot with full Chinese analysis, references, and POCs where available.