DENX Software Engineering vulnerabilities
We track 2 vulnerabilities in DENX Software Engineering products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on September 29, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest DENX Software Engineering vulnerabilities
- 9.0 Critical severity
Das U-Boot: Incomplete Cleanup
Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fi
- 7.8 High severity
U-Boot: Out-of-bounds Write
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-serv