U-Boot before version 2021.10-14.oe2203sp4 contains buffer overflow vulnerabilities in the nfs_read_reply() and nfs_readlink_reply() functions. These flaws allow a malicious NFS server to send crafted replies that exploit signed integer handling errors, leading to memory corruption and potential bootloader crashes.