Denx vulnerabilities
Published CVEs affecting Denx products: 2 record(s), with severity, exploitation and fixes.
CVE-2026-46728
High · 8.8
CWE-346 May 16, 2026
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass…
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
CVE-2025-24857
High · 7.6
CWE-284 Dec 10, 2025
Improper Access Control in Denx U-boot
Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code.