Skip to content
Threat Feed
Subscribe

Tag

Embedded-Security

2 briefs RSS
high advisory

U-Boot Use-After-Free in lwIP wget Implementation

U-Boot versions prior to 2026.10-rc5 contain a use-after-free vulnerability in the httpc_recv_cb function, which can be triggered during failed HTTP data storage to cause a bootloader crash.

U-Boot vulnerability embedded-security denial-of-service
1t 1c
high advisory

Multiple Vulnerabilities in Wind River VxWorks 7

Multiple vulnerabilities in Wind River VxWorks 7 allow a local attacker to perform denial-of-service attacks, potentially execute arbitrary code, and disclose or manipulate sensitive data.

VxWorks 7 +1 vulnerability embedded-security privilege-escalation
3t updated