8.2
High
CVE-2026-46728 Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted…
Description
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| U-Boot 2026.04 | earliest → < 2026.04 | 2026.04 |
References
- github.com github.com
- github.com github.com
Timeline
- Published
- Last modified
Other CVEs of U-Boot
The 8 CVEs of U-Boot →
CVE-2024-57259
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for…
7.1
High
CVE-2024-57254
An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a…
7.1
High
CVE-2024-57255
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem…
7.1
High
CVE-2024-57256
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32…
7.1
High