Back

CRITICAL

An issue was discovered in Denx U-Boot before 2026.04

Published Aug 26, 2026

Description

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy() which could lead to arbitrary code execution, a denial of service, or other unspecified impacts.

Affected products

Remediation

No remediation recorded yet.

References (4)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Aug 26, 2026
Updated Sep 1, 2026
Reserved Jan 9, 2026
CISA Vulnrichment
Updated Sep 1, 2026
NVD
Status Deferred
Modified Sep 9, 2026
Red Hat
Severity n/a
Public date n/a
ENISA EUVD
Assigner mitre
Published Aug 26, 2026
Updated Sep 1, 2026
Exploited since n/a
EUVD-2025-210792