{"schema_version":1,"title":"Denx U-Boot vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 28 vulnerabilities in Denx U-Boot: 0 in the last 7 days and 5 in the last 90 days, 16 of them critical and 0 exploited in the wild. The most recent, CVE-2025-70293, was published on 26 August 2026.","url":"https://junglewise.ai/threats/technologies/u-boot","json_url":"https://junglewise.ai/threats/technologies/u-boot.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/u-boot","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","counts":{"high":10,"all_time":28,"critical":16,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":5,"last_365_days":6},"latest":[{"cve":"CVE-2025-70293","cvss":9.8,"epss":0.0082,"slug":"cve-2025-70293-denx-u-boot-integer-overflow-in-ext4fs-get-bgdtable","title":"Denx U-Boot integer overflow in ext4fs_get_bgdtable","severity":"critical","exploited":false,"published_at":"2026-08-26T20:16:59.697+00:00","url":"https://junglewise.ai/threats/cve-2025-70293-denx-u-boot-integer-overflow-in-ext4fs-get-bgdtable"},{"cve":"CVE-2025-70290","cvss":9.8,"epss":0.0067,"slug":"cve-2025-70290-denx-u-boot-integer-overflow-in-zfs-filesystem-support","title":"Denx U-Boot integer overflow in ZFS filesystem support","severity":"critical","exploited":false,"published_at":"2026-08-26T20:16:59.55+00:00","url":"https://junglewise.ai/threats/cve-2025-70290-denx-u-boot-integer-overflow-in-zfs-filesystem-support"},{"cve":"CVE-2026-29009","cvss":8.2,"slug":"cve-2026-29009-u-boot-buffer-overflow-in-nfs-readlink-reply","title":"U-Boot buffer overflow in nfs_readlink_reply","severity":"high","exploited":false,"published_at":"2026-07-08T17:17:21.173+00:00","url":"https://junglewise.ai/threats/cve-2026-29009-u-boot-buffer-overflow-in-nfs-readlink-reply"},{"cve":"CVE-2026-29008","cvss":7.5,"slug":"cve-2026-29008-u-boot-integer-underflow-in-tcp-rx-state-machine","title":"U-Boot integer underflow in tcp_rx_state_machine","severity":"high","exploited":false,"published_at":"2026-07-08T17:17:21.047+00:00","url":"https://junglewise.ai/threats/cve-2026-29008-u-boot-integer-underflow-in-tcp-rx-state-machine"},{"cve":"CVE-2026-29007","cvss":5.3,"slug":"cve-2026-29007-u-boot-out-of-bounds-read-in-tcp-rx-state-machine","title":"U-Boot out-of-bounds read in tcp_rx_state_machine","severity":"medium","exploited":false,"published_at":"2026-07-08T17:17:20.907+00:00","url":"https://junglewise.ai/threats/cve-2026-29007-u-boot-out-of-bounds-read-in-tcp-rx-state-machine"},{"cve":"CVE-2026-46728","cvss":8.2,"slug":"cve-2026-46728-das-u-boot-and-barebox-fit-signature-verification-bypass","title":"Das U-Boot and Barebox FIT signature verification bypass","severity":"high","exploited":false,"published_at":"2026-05-16T22:16:13.317+00:00","url":"https://junglewise.ai/threats/cve-2026-46728-das-u-boot-and-barebox-fit-signature-verification-bypass"},{"cve":"CVE-2024-57258","cvss":7.1,"slug":"cve-2024-57258-das-u-boot-integer-overflows-in-memory-allocator","title":"Das U-Boot integer overflows in memory allocator","severity":"high","exploited":false,"published_at":"2025-02-18T23:15:09.893+00:00","url":"https://junglewise.ai/threats/cve-2024-57258-das-u-boot-integer-overflows-in-memory-allocator"},{"cve":"CVE-2024-57256","cvss":7.1,"slug":"cve-2024-57256-das-u-boot-integer-overflow-in-ext4fs-read-symlink","title":"Das U-Boot integer overflow in ext4fs_read_symlink","severity":"high","exploited":false,"published_at":"2025-02-18T23:15:09.71+00:00","url":"https://junglewise.ai/threats/cve-2024-57256-das-u-boot-integer-overflow-in-ext4fs-read-symlink"},{"cve":"CVE-2022-2347","cvss":7.7,"slug":"cve-2022-2347-denx-u-boot-heap-buffer-overflow-in-usb-dfu-implementation","title":"DENX U-Boot heap buffer overflow in USB DFU implementation","severity":"high","exploited":false,"published_at":"2022-09-23T13:15:10.133+00:00","url":"https://junglewise.ai/threats/cve-2022-2347-denx-u-boot-heap-buffer-overflow-in-usb-dfu-implementation"},{"cve":"CVE-2022-34835","cvss":9.8,"slug":"cve-2022-34835-denx-das-u-boot-stack-buffer-overflow-in-i2c-md-command","title":"Denx Das U-Boot stack buffer overflow in i2c md command","severity":"critical","exploited":false,"published_at":"2022-06-30T00:15:08.023+00:00","url":"https://junglewise.ai/threats/cve-2022-34835-denx-das-u-boot-stack-buffer-overflow-in-i2c-md-command"},{"cve":"CVE-2022-30790","cvss":7.8,"slug":"cve-2022-30790-das-u-boot-buffer-overflow-in-version-2022-01","title":"Das U-Boot buffer overflow in version 2022.01","severity":"high","exploited":false,"published_at":"2022-06-08T13:15:08.137+00:00","url":"https://junglewise.ai/threats/cve-2022-30790-das-u-boot-buffer-overflow-in-version-2022-01"},{"cve":"CVE-2022-30552","cvss":5.5,"slug":"cve-2022-30552-das-u-boot-buffer-overflow-in-bootloader","title":"Das U-Boot buffer overflow in bootloader","severity":"medium","exploited":false,"published_at":"2022-06-08T13:15:08.08+00:00","url":"https://junglewise.ai/threats/cve-2022-30552-das-u-boot-buffer-overflow-in-bootloader"},{"cve":"CVE-2020-10648","cvss":7.8,"slug":"cve-2020-10648-denx-das-u-boot-verified-boot-bypass-in-fit-image-parsing","title":"Denx Das U-Boot verified boot bypass in FIT image parsing","severity":"high","exploited":false,"published_at":"2020-03-19T14:15:12.177+00:00","url":"https://junglewise.ai/threats/cve-2020-10648-denx-das-u-boot-verified-boot-bypass-in-fit-image-parsing"},{"cve":"CVE-2019-13106","cvss":7.8,"slug":"cve-2019-13106-denx-u-boot-stack-buffer-overflow-in-ext4fs-read-file","title":"Denx U-Boot stack buffer overflow in ext4fs_read_file","severity":"high","exploited":false,"published_at":"2019-08-06T20:15:12.11+00:00","url":"https://junglewise.ai/threats/cve-2019-13106-denx-u-boot-stack-buffer-overflow-in-ext4fs-read-file"},{"cve":"CVE-2019-13104","cvss":7.8,"slug":"cve-2019-13104-das-u-boot-integer-underflow-in-ext4-filesystem-parsing","title":"Das U-Boot integer underflow in ext4 filesystem parsing","severity":"high","exploited":false,"published_at":"2019-08-06T19:15:13.253+00:00","url":"https://junglewise.ai/threats/cve-2019-13104-das-u-boot-integer-underflow-in-ext4-filesystem-parsing"},{"cve":"CVE-2019-14204","cvss":9.8,"slug":"cve-2019-14204-das-u-boot-stack-overflow-in-nfs-umountall-reply","title":"Das U-Boot stack overflow in nfs_umountall_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:14.04+00:00","url":"https://junglewise.ai/threats/cve-2019-14204-das-u-boot-stack-overflow-in-nfs-umountall-reply"},{"cve":"CVE-2019-14203","cvss":9.8,"slug":"cve-2019-14203-das-u-boot-stack-overflow-in-nfs-mount-reply","title":"Das U-Boot stack overflow in nfs_mount_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.963+00:00","url":"https://junglewise.ai/threats/cve-2019-14203-das-u-boot-stack-overflow-in-nfs-mount-reply"},{"cve":"CVE-2019-14202","cvss":9.8,"slug":"cve-2019-14202-das-u-boot-stack-overflow-in-nfs-readlink-reply","title":"Das U-Boot stack overflow in nfs_readlink_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.9+00:00","url":"https://junglewise.ai/threats/cve-2019-14202-das-u-boot-stack-overflow-in-nfs-readlink-reply"},{"cve":"CVE-2019-14201","cvss":9.8,"slug":"cve-2019-14201-das-u-boot-stack-buffer-overflow-in-nfs-lookup-reply","title":"Das U-Boot stack buffer overflow in nfs_lookup_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.823+00:00","url":"https://junglewise.ai/threats/cve-2019-14201-das-u-boot-stack-buffer-overflow-in-nfs-lookup-reply"},{"cve":"CVE-2019-14200","cvss":9.8,"slug":"cve-2019-14200-das-u-boot-stack-overflow-in-rpc-lookup-reply","title":"Das U-Boot stack overflow in rpc_lookup_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.76+00:00","url":"https://junglewise.ai/threats/cve-2019-14200-das-u-boot-stack-overflow-in-rpc-lookup-reply"},{"cve":"CVE-2019-14199","cvss":9.8,"slug":"cve-2019-14199-das-u-boot-integer-underflow-in-udp-packet-parsing","title":"Das U-Boot integer underflow in UDP packet parsing","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.683+00:00","url":"https://junglewise.ai/threats/cve-2019-14199-das-u-boot-integer-underflow-in-udp-packet-parsing"},{"cve":"CVE-2019-14198","cvss":9.8,"slug":"cve-2019-14198-das-u-boot-unbounded-memcpy-in-nfs-read-reply","title":"Das U-Boot unbounded memcpy in nfs_read_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.62+00:00","url":"https://junglewise.ai/threats/cve-2019-14198-das-u-boot-unbounded-memcpy-in-nfs-read-reply"},{"cve":"CVE-2019-14197","cvss":9.1,"slug":"cve-2019-14197-das-u-boot-out-of-bounds-read-in-nfs-read-reply","title":"Das U-Boot out-of-bounds read in nfs_read_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.54+00:00","url":"https://junglewise.ai/threats/cve-2019-14197-das-u-boot-out-of-bounds-read-in-nfs-read-reply"},{"cve":"CVE-2019-14196","cvss":9.8,"slug":"cve-2019-14196-das-u-boot-stack-overflow-in-nfs-lookup-reply","title":"Das U-Boot stack overflow in nfs_lookup_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.48+00:00","url":"https://junglewise.ai/threats/cve-2019-14196-das-u-boot-stack-overflow-in-nfs-lookup-reply"},{"cve":"CVE-2019-14195","cvss":9.8,"slug":"cve-2019-14195-das-u-boot-stack-overflow-in-nfs-readlink-reply","title":"Das U-Boot stack overflow in nfs_readlink_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.4+00:00","url":"https://junglewise.ai/threats/cve-2019-14195-das-u-boot-stack-overflow-in-nfs-readlink-reply"}],"weekly":[{"week":"2026-06-29","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-06","critical":0,"exploited":0,"vulnerabilities":3},{"week":"2026-07-13","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-20","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-07-27","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-03","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-10","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":2,"exploited":0,"vulnerabilities":2},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"Denx U-Boot","slug":"u-boot","vendor":{"name":"Denx","slug":"denx","url":"https://junglewise.ai/threats/vendors/denx"},"aliases":[],"category":"firmware","homepage":"https://www.denx.de/wiki/U-Boot","repo_url":"https://source.denx.de/u-boot/u-boot","description":"A primary bootloader used in embedded devices to package the instructions to boot the device's operating system kernel.","url":"https://junglewise.ai/threats/technologies/u-boot"},"most_severe":[{"cve":"CVE-2025-70293","cvss":9.8,"epss":0.0082,"slug":"cve-2025-70293-denx-u-boot-integer-overflow-in-ext4fs-get-bgdtable","title":"Denx U-Boot integer overflow in ext4fs_get_bgdtable","severity":"critical","exploited":false,"published_at":"2026-08-26T20:16:59.697+00:00","url":"https://junglewise.ai/threats/cve-2025-70293-denx-u-boot-integer-overflow-in-ext4fs-get-bgdtable"},{"cve":"CVE-2025-70290","cvss":9.8,"epss":0.0067,"slug":"cve-2025-70290-denx-u-boot-integer-overflow-in-zfs-filesystem-support","title":"Denx U-Boot integer overflow in ZFS filesystem support","severity":"critical","exploited":false,"published_at":"2026-08-26T20:16:59.55+00:00","url":"https://junglewise.ai/threats/cve-2025-70290-denx-u-boot-integer-overflow-in-zfs-filesystem-support"},{"cve":"CVE-2022-34835","cvss":9.8,"slug":"cve-2022-34835-denx-das-u-boot-stack-buffer-overflow-in-i2c-md-command","title":"Denx Das U-Boot stack buffer overflow in i2c md command","severity":"critical","exploited":false,"published_at":"2022-06-30T00:15:08.023+00:00","url":"https://junglewise.ai/threats/cve-2022-34835-denx-das-u-boot-stack-buffer-overflow-in-i2c-md-command"},{"cve":"CVE-2019-14204","cvss":9.8,"slug":"cve-2019-14204-das-u-boot-stack-overflow-in-nfs-umountall-reply","title":"Das U-Boot stack overflow in nfs_umountall_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:14.04+00:00","url":"https://junglewise.ai/threats/cve-2019-14204-das-u-boot-stack-overflow-in-nfs-umountall-reply"},{"cve":"CVE-2019-14203","cvss":9.8,"slug":"cve-2019-14203-das-u-boot-stack-overflow-in-nfs-mount-reply","title":"Das U-Boot stack overflow in nfs_mount_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.963+00:00","url":"https://junglewise.ai/threats/cve-2019-14203-das-u-boot-stack-overflow-in-nfs-mount-reply"},{"cve":"CVE-2019-14202","cvss":9.8,"slug":"cve-2019-14202-das-u-boot-stack-overflow-in-nfs-readlink-reply","title":"Das U-Boot stack overflow in nfs_readlink_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.9+00:00","url":"https://junglewise.ai/threats/cve-2019-14202-das-u-boot-stack-overflow-in-nfs-readlink-reply"},{"cve":"CVE-2019-14201","cvss":9.8,"slug":"cve-2019-14201-das-u-boot-stack-buffer-overflow-in-nfs-lookup-reply","title":"Das U-Boot stack buffer overflow in nfs_lookup_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.823+00:00","url":"https://junglewise.ai/threats/cve-2019-14201-das-u-boot-stack-buffer-overflow-in-nfs-lookup-reply"},{"cve":"CVE-2019-14200","cvss":9.8,"slug":"cve-2019-14200-das-u-boot-stack-overflow-in-rpc-lookup-reply","title":"Das U-Boot stack overflow in rpc_lookup_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.76+00:00","url":"https://junglewise.ai/threats/cve-2019-14200-das-u-boot-stack-overflow-in-rpc-lookup-reply"},{"cve":"CVE-2019-14199","cvss":9.8,"slug":"cve-2019-14199-das-u-boot-integer-underflow-in-udp-packet-parsing","title":"Das U-Boot integer underflow in UDP packet parsing","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.683+00:00","url":"https://junglewise.ai/threats/cve-2019-14199-das-u-boot-integer-underflow-in-udp-packet-parsing"},{"cve":"CVE-2019-14198","cvss":9.8,"slug":"cve-2019-14198-das-u-boot-unbounded-memcpy-in-nfs-read-reply","title":"Das U-Boot unbounded memcpy in nfs_read_reply","severity":"critical","exploited":false,"published_at":"2019-07-31T13:15:13.62+00:00","url":"https://junglewise.ai/threats/cve-2019-14198-das-u-boot-unbounded-memcpy-in-nfs-read-reply"}],"generated_at":"2026-09-26T09:11:00.170868+00:00"}