U-Boot versions up to 2026.10-rc5 contain an out-of-bounds write vulnerability in the video_display_rle8_bitmap function within drivers/video/video_bmp.c. This flaw allows specially crafted RLE8-compressed BMP images to corrupt memory adjacent to the framebuffer, potentially causing the bootloader to crash. The vulnerability has a medium severity with a CVSS score of 5.9.