Product by Ubuntu
U-boot
8 known vulnerabilities in U-boot (Ubuntu), 0 of them actively exploited (CISA KEV).
Key figures
8
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2025-70293 | U-Boot: Heap-based Buffer Overflow | 9.8 | |
| Critical | CVE-2025-70290 | U-Boot: Integer Overflow or Wraparound | 9.8 | |
| High | CVE-2026-71971 | U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly | 8.2 | |
| High | CVE-2026-74221 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK | 8.2 | |
| High | CVE-2026-74220 | U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply | 8.2 | |
| High | CVE-2026-74222 | U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback | 8.2 | |
| Critical | CVE-2026-15390 | Out-of-bounds write in Das U-Boot | — | |
| High | CVE-2026-74225 | U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6 | 7.1 |