U-Boot versions before 2024.01-6.oe2403sp1 contain buffer overflow vulnerabilities in the nfs_read_reply() and nfs_readlink_reply() functions. These flaws allow a malicious NFS server to send crafted replies that exploit signed integer handling errors, leading to memory corruption and potential bootloader crashes. The vulnerabilities are fixed in version 2024.01-6.oe2403sp1.