U
Vendor security profile
u-boot
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs12
Critical1
CISA KEV0
Public exploit4
Patch rate%75
Avg. CVSS7.4
12-month vulnerability rate
0
0
0
0
0
0
1
0
3
0
8
0
CVE KEV
CVE severity distribution
12toplam CVE
Critical1 (8%)
High7 (58%)
Medium4 (33%)
Patch and exploitation view
%75
Verified patch
%0
CISA KEV
%33
Public exploit
9Patch available
0Partial
0Workaround
0Vendor: no patch
3Unknown
Latest vulnerabilities
7.1
CVE-2026-74225
U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6
U
Patch verifiedEPSS %0
8.8
CVE-2026-74222
U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback
U
Patch verifiedEPSS %0
8.8
CVE-2026-74221
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READLINK
U
Patch verifiedEPSS %0
8.8
CVE-2026-74220
U-Boot before 2026.10-rc5 Buffer Overflow via NFS READ Reply
U
Patch verifiedEPSS %0
4.3
CVE-2026-71974
U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read
U
Patch verifiedEPSS %0
5.2
CVE-2026-71973
U-Boot before 2026.10-rc4 Integer Overflow in SquashFS Directory Table Allocation
U
Patch verifiedEPSS %0
6.0
CVE-2026-71972
U-Boot through 2026.10-rc5 Out-of-Bounds Write in BMP RLE8 Decoder
U
Patch verifiedEPSS %0
8.8
CVE-2026-71971
U-Boot before 2026.10-rc3 Out-of-Bounds Write in IP Fragment Reassembly
U
Patch verifiedEPSS %0