WID-SEC-W-2026-3052

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

DENX U-Boot: Mehrere Schwachstellen ermöglichen Codeausführung und DoS

view advisory published 2026-08-26

Ein Angreifer kann mehrere Schwachstellen in DENX U-Boot ausnutzen, um möglicherweise beliebigen Code auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2025-70293US——
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocation a…
CVE-2025-70290US——
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may…
CVE-2025-70291US——
CVE-2025-70292US——
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan