DENX U-Boot: Mehrere Schwachstellen ermöglichen Codeausführung und DoS
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in DENX U-Boot ausnutzen, um möglicherweise beliebigen Code auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-30522 linked CVEs
Open advisory with all CVEs
More on DoS
Other advisories
- Not ratedosv:CLEANSTART-2023-XT09932Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS)
- Not ratedosv:CLEANSTART-2023-CG09652regular expression based DoS vulnerability in Active Support <6
- Not ratedosv:CLEANSTART-2024-BT31148PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled
- Not ratedosv:CLEANSTART-2024-YJ18167All versions of package @discordjs/opus are vulnerable to Denial of Service (DoS) when trying to encode using an encoder with zero channels, or a non-initialized buffer
- Not ratedosv:CLEANSTART-2024-DK52276denial of service (DoS) vulnerability was discovered in go-git versions prior to v5
- Not ratedosv:CLEANSTART-2026-DB64720There is a DoS vulnerability in Pillow before 6
- Not ratedosv:CLEANSTART-2026-RJ11637ReDoS issue was discovered in the Time component through 0
- Not ratedosv:CLEANSTART-2026-NP12828ReDoS issue was discovered in the URI component through 0
Other news entries
- Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%NewsThe Hacker News
- Choosing a WAAP in 2026: 3 questions that separate the shortlistNewsCSO Online
- TianoCore EDK2 PXE Treiber: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und DoSVulnerabilityBSI CERT-Bund
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVNewsThe Hacker News
- "Icepick" leak exposes records on 41,000 DHS employees, including undercover ICE agentsBreachpwn.watch
- Apple iOS, iPadOS, macOS und Safari: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- NCSC-2026-0456 [1.00] [M/H] Kwetsbaarheden verholpen in Apple iOS en iPadOSNewsNCSC-NL
- TianoCore EDK2 PXE Treiber: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und DoSVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3052
ID