U-Boot vulnerabilities

1 known vulnerability in U-Boot from DENX Software Engineering. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  U-Boot: Out-of-bounds Write

  CVE-2022-33967Jul 20, 2022DENX Software Engineering

  squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-serv