Skip to content
Threat Feed
Subscribe

Tag

Bootloader

5 briefs RSS
high advisory

DENX U-Boot: Multiple Vulnerabilities Enable Arbitrary Code Execution and Denial of Service

An attacker with physical access can exploit multiple unspecified vulnerabilities in DENX U-Boot to execute arbitrary code with service privileges, leading to system compromise and potentially causing a denial-of-service condition.

U-Boot physical-access bootloader embedded-systems arbitrary-code-execution denial-of-service
2t
high advisory

CVE-2026-29008: U-Boot Integer Underflow Leads to Bootloader Crash

An integer underflow vulnerability (CVE-2026-29008) in U-Boot's `tcp_rx_state_machine()` function allows a network-adjacent attacker to crash the bootloader by sending a crafted TCP SYN+ACK packet, potentially preventing device boot and leading to memory corruption.

U-Boot denial-of-service vulnerability bootloader network embedded-systems
1t 1c
high threat

barebox EFI PE Loader Memory-Safety Vulnerabilities (CVE-2026-34963)

barebox versions prior to 2026.04.0 are vulnerable to memory-safety issues in the EFI PE loader (CVE-2026-34963), potentially allowing code execution via malicious EFI PE binaries.

barebox memory-safety heap-overflow bootloader
1r 1t 1c
high advisory

Multiple Vulnerabilities in Grub Bootloader

Multiple vulnerabilities in the Grub bootloader allow attackers to execute arbitrary code and cause denial-of-service conditions.

bootloader grub2 vulnerability denial-of-service arbitrary-code-execution
2r 2t
high advisory

Windows EFI Bootloader File Modification Detection

A process writing to critical EFI bootloader files (bootmgfw.efi or bootx64.efi) within the \EFI\Boot\ directory may indicate a bootkit installation, malicious code persistence at the firmware level, or tampering with the system boot process.

Splunk Enterprise +2 bootkit persistence efi bootloader windows
2r 1t 1c