U-Boot versions prior to 2024.01-6.oe2403sp3 contain buffer overflow vulnerabilities in the nfs_read_reply() and nfs_readlink_reply() functions. These flaws allow a malicious NFS server to send crafted responses that exploit signed integer handling and length validation bypasses, leading to memory corruption and potential bootloader crashes.