Threats affecting pkg:github/u-boot

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.0	CVE-2026-71972u-boot · Out-of-bounds Write Medium6.02026-09-29CVE Database V5CVE-2026-71972 CVE-2026-71972 is an out-of-bounds write vulnerability in U-Boot versions before 2027.01-rc1. It occurs in the video_display_rle8_bitmap function when processing crafted RLE8-compressed BMP images. Exploitation can lead to memory corruption adjacent to the framebuffer and cause the bootloader to crash. Vulnerability	CVE Database V5	2026-09-29

Page 1 of 1