Skip to content
Threat Feed
Subscribe

Vendor

Das U-Boot

1 brief RSS
high advisory

U-Boot Use-After-Free in lwIP wget Implementation

U-Boot versions prior to 2026.10-rc5 contain a use-after-free vulnerability in the httpc_recv_cb function, which can be triggered during failed HTTP data storage to cause a bootloader crash.

U-Boot vulnerability embedded-security denial-of-service
1t 1c