Threats tagged 'ghsa-fm4f-g9jh-3qfq'

U-Boot versions prior to 2026.10-rc5 contain a use-after-free vulnerability in the httpc_recv_cb() function of the lwIP wget implementation. This vulnerability arises when HTTP data storage fails, causing the callback to free the connection PCB but return an incorrect error code, leading to access of freed memory and potential bootloader crash. The flaw can cause denial of service by crashing the bootloader but does not impact confidentiality or integrity. A patch is available to address this issue.