Pengutronix
6 CVEs across 2 Pengutronix products. Browse Pengutronix vulnerabilities, severities, and proof-of-concept exploits.
Pengutronix products with known CVEs
Pengutronix CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2026-46728 | High | 8.2 | 2026-05-16 | Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash. |
CVE-2026-34963 | High | 8.4 | 2026-05-11 | barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual im… |
CVE-2026-34962 | Medium | 6.2 | 2026-05-11 | barebox version prior to 2026.04.0 contains a denial-of-service vulnerability in ext4 directory parsing in fs/ext4/ext4_common.c where the ext4fs_iterate_dir()… |
CVE-2026-34961 | Medium | 6.2 | 2026-05-11 | barebox prior to version 2026.04.0 contains out-of-bounds read vulnerabilities in ext4 extent parsing due to missing validation of the eh_entries field against… |
CVE-2026-34960 | Medium | 6.5 | 2026-05-11 | barebox prior to version 2026.04.0 contains an out-of-bounds read vulnerability in DHCP option parsing within the dhcp_message_type() function that fails to ve… |
CVE-2026-34155 | Medium | 5.3 | 2026-03-31 | RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB ca… |
CVE-2026-33243 | High | 8.2 | 2026-03-20 | barebox is a bootloader. In barebox from version 2016.03.0 to before version 2026.03.1 (and the corresponding backport to 2025.09.3), an attacker could exploit… |
CVE-2024-57262 | High | 7.1 | 2025-02-19 | In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inod… |
CVE-2024-57261 | High | 7.1 | 2025-02-19 | In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258. |
CVE-2021-37848 | High | 7.5 | 2021-08-02 | common/password.c in Pengutronix barebox through 2021.07.0 leaks timing information because strncmp is used during hash comparison. |
CVE-2021-37847 | High | 7.5 | 2021-08-02 | crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest verification. |
CVE-2020-25860 | Medium | 6.6 | 2020-12-21 | The install.c module in the Pengutronix RAUC update client prior to version 1.5 has a Time-of-Check Time-of-Use vulnerability, where signature verification on… |
CVE-2020-13910 | Critical | 9.1 | 2020-06-07 | Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an incoming network packet is directly used… |
CVE-2019-15938 | Critical | 9.8 | 2019-09-05 | Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length field is directly used for a memcpy. |
CVE-2019-15937 | Critical | 9.8 | 2019-09-05 | Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length field is directly used for a memcpy. |