https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T07:59:53.564731+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-379680 EUVD-2026-379680 2026-10-05T07:59:53.638597+00:00 EUVD-2026-379680 https://cve.radiocsirt.org/vuln/fkie_cve-2026-71974 fkie_cve-2026-71974 2026-10-05T07:59:53.638635+00:00

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on devices without Android Verified Boot protection.

 https://cve.radiocsirt.org/vuln/ghsa-c7vr-vjm2-3grc GHSA-c7vr-vjm2-3grc 2026-10-05T07:59:53.638670+00:00

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on devices without Android Verified Boot protection.

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2026-71974 UBUNTU-CVE-2026-71974 2026-10-05T07:59:53.638687+00:00

Affected: Ubuntu:16.04:LTS: u-boot, Ubuntu:18.04:LTS: u-boot, Ubuntu:20.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot-nezha, Ubuntu:24.04:LTS: u-boot, Ubuntu:24.04:LTS: u-boot-nezha, Ubuntu:26.04:LTS: u-boot

U-Boot before 2026.10-rc3 contains an out-of-bounds write vulnerability in read_slotted_partition() that fails to validate image size against partition bounds. Attackers with physical access can supply crafted boot media with oversized headers to write past the load buffer into bootloader memory on devices without Android Verified Boot protection.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-3660 WID-SEC-W-2026-3660 — DENX U-Boot: Mehrere Schwachstellen 2026-10-05T07:59:53.638720+00:00

Ein Angreifer kann mehrere Schwachstellen in DENX U-Boot ausnutzen, um den Speicher zu beschädigen, Denial-of-Service-Zustände herbeizuführen oder andere, nicht näher spezifizierte Angriffe zu starten.