Known vulnerabilities in Universal Boot Loader (U-Boot)

Vendor: DENX
Software: Universal Boot Loader (U-Boot)
Software CPE: cpe:2.3:a:denx:u-boot:*:*:*:*:*:*:*:*
Website: https://www.denx.de
Total vulnerabilities: 28
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Universal Boot Loader (U-Boot) Universal Boot Loader (U-Boot) is affected by 28 known vulnerabilities: 2 critical, 7 high, 5 medium, 14 low Critical High Medium Low

Vulnerabilities (28)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU123165 - Out-of-bounds read
CVE-2024-42040		 CWE-125 Medium
No
No
 2026.01 rc1 24.02.2026 SB2026022417
SB2026022418
SB20260417130
#VU120245 - Improper Access Control for Volatile Memory Containing Boot Code
CVE-2025-24857		 CWE-1274 Low
No
No
 2017.11 23.12.2025 SB2025122301
#VU105297 - Off-by-one Error
CVE-2024-57259		 CWE-193 Low
No
No
 2025.01 rc1 04.03.2025 SB2025030430
SB2025030433
SB2025030434
and 3 more
#VU105296 - Integer overflow
CVE-2024-57258		 CWE-190 Low
No
No
 2025.01 rc1 04.03.2025 SB2025030430
SB2025030432
SB2025030433
and 8 more
#VU105295 - Resource exhaustion
CVE-2024-57257		 CWE-400 Low
No
No
 2025.01 rc1 04.03.2025 SB2025030430
SB2025030433
SB2025030434
and 3 more
#VU105293 - Integer overflow
CVE-2024-57255		 CWE-190 Low
No
No
 2025.01 rc1 04.03.2025 SB2025030430
SB2025030433
SB2025030434
and 3 more
#VU105292 - Integer overflow
CVE-2024-57254		 CWE-190 Low
No
No
 2025.01 rc1 04.03.2025 SB2025030430
SB2025030433
SB2025030434
and 3 more
#VU105267 - Integer overflow
CVE-2024-57256		 CWE-190 Low
No
No
 2025.01 rc1 04.03.2025 SB2025030430
SB2025030432
SB2025030433
and 9 more
#VU69943 - Out-of-bounds write
CVE-2022-2347		 CWE-787 Low
No
No
 2023.01 rc1 06.12.2022 SB2022120643
SB2022120646
SB2023112960
and 5 more
#VU66705 - Out-of-bounds write
CVE-2022-33103		 CWE-787 Low
No
No
 2022.07 23.08.2022 SB2022082305
SB2022082307
SB2022082308
and 3 more
#VU66594 - Stack-based buffer overflow
CVE-2022-34835		 CWE-121 Low
No
No
 2022.07 17.08.2022 SB2022081749
SB2022081752
SB2022081753
and 8 more
#VU65331 - Heap-based Buffer Overflow
CVE-2022-33967		 CWE-122 Low
No
No
 2022.07 15.07.2022 SB2022071501
SB2022081752
SB2022081754
and 3 more
#VU64420 - Memory corruption
CVE-2022-30767		 CWE-119 High
No
No
 2022.07 rc3 15.06.2022 SB2022061559
SB2022061575
SB2022061576
and 5 more
#VU64419 - Out-of-bounds write
CVE-2019-14196		 CWE-787 High
No
No
 2019.10 15.06.2022 SB2019073118
SB2023071324
SB2022101446
#VU64139 - Out-of-bounds write
CVE-2022-30790		 CWE-787 Medium
No
No
 2022.07 rc4 09.06.2022 SB2022060915
SB2022061575
SB2022061576
and 8 more
#VU64137 - Memory corruption
CVE-2022-30552		 CWE-119 Low
No
No
 2022.07 rc4 09.06.2022 SB2022060915
SB2022061575
SB2022061576
and 8 more
#VU30331 - Improper input validation
CVE-2020-10648		 CWE-20 Low
No
No
 2018.03 19.03.2020 SB2020031938
#VU19989 - Stack-based buffer overflow
CVE-2019-13106		 CWE-121 Critical
No
No
 - 08.08.2019 SB2019080643
SB2019100136
SB2019100137
#VU19988 - Double Free
CVE-2019-13105		 CWE-415 Critical
No
No
 - 08.08.2019 SB2019080642
#VU35641 - Memory corruption
CVE-2019-13104		 CWE-119 High
No
No
 - 06.08.2019 SB2019080654
SB2019100136
SB2019100137


Showing elements 1 - 20 out of 28