DENX Software Engineering vulnerabilities
2 vulnerabilities
Known vulnerabilities in DENX Software Engineering products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 2 products.
Products
2- Das U Boot1 vulnerabilities
- U Boot1 vulnerabilities
HighCVE-2022-33967debian · u-boot +3 moredebian u-bootsquashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.EPSS0.56%CriticalCVE-2026-15390debian · u-boot +3 moreOut-of-bounds write in Das U-BootDas U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets.
This issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa in version 2026.07.EPSS0.29%