All 7 CVE vulnerabilities found in barebox, with AI-generated Chinese analysis, references, and POCs.
Vendor: Pengutronix
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-34963 | barebox EFI PE Loader Memory Safety Vulnerabilities CWE-190 | 8.4 | High | 2026-05-11 |
| CVE-2026-34962 | barebox ext4 Directory Parsing Infinite Loop Denial of Service CWE-835 | 6.2 | Medium | 2026-05-11 |
| CVE-2026-34961 | barebox ext4 Extent Parsing Out-of-Bounds Read CWE-125 | 6.2 | Medium | 2026-05-11 |
| CVE-2026-34960 | barebox Out-of-Bounds Read in DHCP Option Parsing CWE-125 | 6.5 | Medium | 2026-05-11 |
| CVE-2026-33243 | barebox: FIT Signature Verification Bypass Vulnerability CWE-345 | 8.3 | High | 2026-03-20 |
| CVE-2024-57261 | Barebox 安全漏洞 CWE-190 | 7.1 | High | 2025-02-19 |
| CVE-2024-57262 | Barebox 安全漏洞 CWE-190 | 7.1 | High | 2025-02-19 |
All 7 known CVE vulnerabilities affecting barebox with full Chinese analysis, references, and POCs where available.