Threat database

1 threat

Threat database
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.0	EPSS 0.3%	CVE-2026-15390Das U-Boot · Out-of-bounds write Critical9.0EPSS 0.3%2026-09-29CVE Database V5CVE-2026-15390 Das U-Boot with CONFIG_IP_DEFRAG=y parameter fails to clear IP reassembly state after delivering a complete datagram. An attacker who can deliver fragmented IP traffic can execute arbitrary code by sending duplicated last-fragment IP packets. This issue was fixed in commit b1aec609bb5e0d08c25c888c91935287ab4ee5fa in version 2026.07. EPSS 0.3%Vulnerability DENX Software Engineering #cwe-787 #cwe-459	CVE Database V5	2026-09-29

Showing 1–1 of 1 result