Threat Intelligence Database
Comprehensive database of the latest cyber threats affecting organizations worldwide. Filter and search to find specific threat intelligence relevant to your organization.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threat Intelligence
Click on any threat for detailed analysis and mitigation recommendations
0 U-Boot versions through 2026.04-rc3 contain an integer underflow vulnerability in the tcp_rx_state_machine() function. A network-adjacent attacker can send a malformed TCP SYN+ACK packet with a manipulated data offset field, causing the payload length to become negative. This negative value is converted to a large unsigned integer and passed to memcpy(), resulting in an immediate crash of the bootloader that prevents device boot. If CONFIG_LMB is disabled, this may also lead to memory corruption. Join the discussion | GCVE Database | 07/08/2026, 18:31:37 UTC Added: 07/14/2026, 09:21:29 UTC |
0 Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and Qualcomm chips IPQ4019, IPQ5018, IPQ5322, IPQ6018, IPQ8064, IPQ8074, and IPQ9574 could allow an attacker to execute arbitrary code. Join the discussion | CVE Database V5 | 12/10/2025, 00:00:00 UTC Added: 12/10/2025, 20:49:45 UTC |
0 sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation. Join the discussion | CVE Database V5 | 02/18/2025, 23:15:00 UTC Added: 11/03/2025, 19:53:57 UTC |
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. Join the discussion | CVE Database V5 | 02/18/2025, 00:00:00 UTC Added: 11/03/2025, 19:53:57 UTC |
An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. Join the discussion | CVE Database V5 | 02/18/2025, 00:00:00 UTC Added: 11/03/2025, 19:53:57 UTC |
An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem. Join the discussion | CVE Database V5 | 02/18/2025, 00:00:00 UTC Added: 11/03/2025, 19:53:57 UTC |
0 Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allows an attacker on the local network to leak memory from four up to 32 bytes of memory stored behind the packet to the network depending on the later use of DHCP-provided parameters via crafted DHCP responses. Join the discussion | CVE Database V5 | 08/23/2024, 00:00:00 UTC Added: 02/25/2026, 21:42:24 UTC |
Showing 1 to 7 of 7 results