Threats Tagged 'cve-2026-29007'
View all threats tagged with 'cve-2026-29007'. Filter and sort to focus on specific types of threats.
Stop chasing alerts. Route them.
Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.
Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)
API access activates after upgrading in Console -> Billing.
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.
Filter Threats
Narrow down the results by type, severity, or affected countries
Threats Tagged 'cve-2026-29007'
Click on any threat for detailed analysis and mitigation recommendations
U-Boot versions through 2026.04-rc3 have an out-of-bounds read vulnerability in the tcp_rx_state_machine() function when CONFIG_PROT_TCP is enabled. This flaw allows remote attackers to craft malicious TCP packets with mismatched IP total length and TCP data offset fields, causing the system to read beyond the TCP segment boundary. This can corrupt TCP connection state variables and disrupt TCP window calculations. Join the discussion | GCVE Database | 07/08/2026, 18:31:37 UTC Added: 07/14/2026, 09:21:29 UTC |
U-Boot through 2026.04-rc3 contains an out-of-bounds read vulnerability in tcp_rx_state_machine() (net/tcp.c) when CONFIG_PROT_TCP is enabled, allowing remote attackers to read beyond TCP segment boundaries by crafting a malicious packet with a mismatched IP total length and TCP data offset field. Attackers can send a packet with an IP total length of 40 bytes and a TCP data offset claiming 60 bytes of header to cause tcp_parse_options() to read 40 bytes past the end of the TCP segment, potentially corrupting connection state variables such as rmt_win_scale and rmt_timestamp to disrupt TCP window calculations. Join the discussion | GCVE Database | 07/08/2026, 17:17:00 UTC Added: 07/16/2026, 10:39:20 UTC |
Showing 1 to 2 of 2 results