DENX U-Boot: Mehrere Schwachstellen ermöglichen Codeausführung und DoS
NEOSEC enrichment — no mirror of the original source
Ein Angreifer kann mehrere Schwachstellen in DENX U-Boot ausnutzen, um möglicherweise beliebigen Code auszuführen oder einen Denial-of-Service-Zustand herbeizuführen.
Source: BSI CERT-Bund. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.
Read the issue at BSI CERT-BundFull advisory
Criticalbsi:WID-SEC-2026-30522 linked CVEs
Open advisory with all CVEs
More on DoS
Other advisories
- HighCVE-2026-90948GIMP Plugins: Mehrere Schwachstellen ermöglichen Codeausführung und DoS
- CriticalCVE-2026-97631TianoCore EDK2 PXE Treiber: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und DoS
- MediumCVE-2026-103226Ghostscript: Schwachstelle ermöglicht Manipulation von Dateien und DoS
- MediumCVE-2026-120217Delgan Loguru: ineffizienter regulärer Ausdruck (ReDoS)
- MediumCVE-2026-120217Delgan Loguru: ineffizienter regulärer Ausdruck (ReDoS)
- Not ratedosv:CLEANSTART-2023-XT09932Integer Overflow vulnerability in mp_grow in libtom libtommath before commit beba892bc0d4e4ded4d667ab1d2a94f4d75109a9, allows attackers to execute arbitrary code and cause a denial of service (DoS)
- Not ratedosv:CLEANSTART-2023-CG09652regular expression based DoS vulnerability in Active Support <6
- Not ratedosv:CLEANSTART-2024-BT31148PV guest could DoS Xen while unmapping a grant To address XSA-380, reference counting was introduced for grant mappings for the case where a PV guest would have the IOMMU enabled
Other news entries
- Cloudflare Reports 18.2 Million Network-Layer DDoS Attacks in Q3, Up 38%NewsThe Hacker News
- Choosing a WAAP in 2026: 3 questions that separate the shortlistNewsCSO Online
- TianoCore EDK2 PXE Treiber: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und DoSVulnerabilityBSI CERT-Bund
- CISA Adds Actively Exploited GitLab RCE and Cisco Firewall DoS Flaws to KEVNewsThe Hacker News
- "Icepick" leak exposes records on 41,000 DHS employees, including undercover ICE agentsBreachpwn.watch
- Apple iOS, iPadOS, macOS und Safari: Mehrere SchwachstellenVulnerabilityBSI CERT-Bund
- NCSC-2026-0456 [1.00] [M/H] Kwetsbaarheden verholpen in Apple iOS en iPadOSNewsNCSC-NL
- TianoCore EDK2 PXE Treiber: Schwachstelle ermöglicht Ausführen von beliebigem Programmcode und DoSVulnerabilityBSI CERT-Bund
Source: https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-3052
ID