https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 08:34:49 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-13600 bdu:2025-13600 https://cve.radiocsirt.org/vuln/bdu:2025-13600 https://cve.radiocsirt.org/vuln/euvd-2026-316890 EUVD-2026-316890 https://cve.radiocsirt.org/vuln/euvd-2026-316890 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34835 <p>In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the &#34;i2c md&#34; command enables the corruption of the return address pointer of the do_i2c_md function.</p> <p>In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the &#34;i2c md&#34; command enables the corruption of the return address pointer of the do_i2c_md function.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34835 https://cve.radiocsirt.org/vuln/ghsa-9gfq-p9vq-r563 <p>In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the &#34;i2c md&#34; command enables the corruption of the return address pointer of the do_i2c_md function.</p> <p>In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the &#34;i2c md&#34; command enables the corruption of the return address pointer of the do_i2c_md function.</p> https://cve.radiocsirt.org/vuln/ghsa-9gfq-p9vq-r563 https://cve.radiocsirt.org/vuln/gsd-2022-34835 gsd-2022-34835 https://cve.radiocsirt.org/vuln/gsd-2022-34835 https://cve.radiocsirt.org/vuln/icsa-26-134-16 <p>A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the &#34;if&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the &#34;else&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. An issue was discove…</p> <p>A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the &#34;if&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the &#34;else&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. An issue was discove…</p> https://cve.radiocsirt.org/vuln/icsa-26-134-16 https://cve.radiocsirt.org/vuln/msrc_cve-2022-34835 msrc_CVE-2022-34835 https://cve.radiocsirt.org/vuln/msrc_cve-2022-34835 https://cve.radiocsirt.org/vuln/ncsc-2026-0147 NCSC-2026-0147 https://cve.radiocsirt.org/vuln/ncsc-2026-0147 https://cve.radiocsirt.org/vuln/oesa-2022-1751 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: uboot-tools, openEuler:20.03-LTS-SP3: uboot-tools, openEuler:22.03-LTS: uboot-tools</p> <p>This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot&#39;s environment. Security Fix(es): In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the &amp;quot;i2c md&amp;quot; command enables the corruption of the return address pointer of the do_i2c_md function.(CVE-2022-34835)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: uboot-tools, openEuler:20.03-LTS-SP3: uboot-tools, openEuler:22.03-LTS: uboot-tools</p> <p>This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot&#39;s environment. Security Fix(es): In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the &amp;quot;i2c md&amp;quot; command enables the corruption of the return address pointer of the do_i2c_md function.(CVE-2022-34835)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1751 https://cve.radiocsirt.org/vuln/ssa-577017 <p>A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the &#34;if&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the &#34;else&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. An issue was discove…</p> <p>A crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data. In Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem. Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the &#34;if&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the &#34;else&#34; block after calculating the new path length. An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply. An issue was discove…</p> https://cve.radiocsirt.org/vuln/ssa-577017 https://cve.radiocsirt.org/vuln/suse-su-2022:2584-1 <p>Security update for u-boot</p> <p>Security update for u-boot</p> https://cve.radiocsirt.org/vuln/suse-su-2022:2584-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-34835 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: u-boot, Ubuntu:18.04:LTS: u-boot, Ubuntu:20.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot</p> <p>In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the &#34;i2c md&#34; command enables the corruption of the return address pointer of the do_i2c_md function.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: u-boot, Ubuntu:18.04:LTS: u-boot, Ubuntu:20.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot</p> <p>In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the &#34;i2c md&#34; command enables the corruption of the return address pointer of the do_i2c_md function.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-34835