| CVE-2026-46728 |
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted…
|
8.2
Élevée
|
16 mai 2026 |
| CVE-2024-57258 |
Integer overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via…
|
7.1
Élevée
|
18 févr. 2025 |
| CVE-2024-57257 |
A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with…
|
2.0
Faible
|
18 févr. 2025 |
| CVE-2024-57256 |
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32…
|
7.1
Élevée
|
18 févr. 2025 |
| CVE-2024-57255 |
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem…
|
7.1
Élevée
|
18 févr. 2025 |
| CVE-2024-57254 |
An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a…
|
7.1
Élevée
|
18 févr. 2025 |
| CVE-2024-57259 |
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for…
|
7.1
Élevée
|
18 févr. 2025 |
| CVE-2019-6268 |
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /
|
7.5
Élevée
|
8 mars 2024 |