Vendor
Pengutronix
14 known vulnerabilities in products by Pengutronix, 0 of them actively exploited (CISA KEV).
Key figures
14
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2019-15937 | Pengutronix Barebox: Buffer Overflow | 9.8 | |
| Critical | CVE-2019-15938 | Pengutronix Barebox: Buffer Overflow | 9.8 | |
| Critical | CVE-2020-13910 | Pengutronix Barebox: Out-of-Bounds Read | 9.1 | |
| High | CVE-2021-37848 | Pengutronix Barebox: security vulnerability | 7.5 | |
| High | CVE-2021-37847 | Pengutronix Barebox: security vulnerability | 7.5 | |
| Medium | CVE-2020-25860 | Pengutronix RAUC: Time-of-check Time-of-use (TOCTOU) Race Condition | 6.6 | |
| High | CVE-2026-34963 | barebox EFI PE Loader Memory Safety Vulnerabilities | 8.4 | |
| High | CVE-2026-33243 | barebox: FIT Signature Verification Bypass Vulnerability | 8.3 | |
| High | CVE-2026-34960 | barebox Out-of-Bounds Read in DHCP Option Parsing | 6.5 | |
| Medium | CVE-2026-34961 | barebox ext4 Extent Parsing Out-of-Bounds Read | 6.2 | |
| High | CVE-2026-34155 | RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB | 5.3 | |
| Medium | CVE-2026-34962 | barebox ext4 Directory Parsing Infinite Loop Denial of Service | 6.2 | |
| High | CVE-2024-57262 | Pengutronix Barebox: Integer Overflow or Wraparound | 7.1 | |
| High | CVE-2024-57261 | Pengutronix Barebox: Integer Overflow or Wraparound | 7.1 |
Products
| Pengutronix Barebox | 12 | 0 |