Skip to content
Noroxi

denx records

50 published records for vendor denx.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
2
With a fix record
80%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 20
  4. 21
  5. 22
  6. 24
  7. 25
  8. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

50 records
  • CVE-2020-8432
    40Plan

    In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function.

    CriticalCVSS 9.8No exploitEPSS 3%

    denx · u-bootJan 29, 2020

  • CVE-2019-14192
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2022-30767
    40Plan

    nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, le

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootMay 15, 2022

  • CVE-2019-14202
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14204
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14203
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14200
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14201
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14195
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14193
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14198
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14199
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2019-14194
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2022-34835
    40Plan

    In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJun 29, 2022

  • CVE-2019-14196
    40Plan

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2018-18439
    40Plan

    DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled.

    CriticalCVSS 9.8No exploitEPSS 2%

    denx · u-bootNov 20, 2018

  • CVE-2019-11059
    40Plan

    Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.

    CriticalCVSS 9.8No exploitEPSS 1%

    denx · u-bootMay 10, 2019

  • CVE-2019-14197
    37Monitor

    An issue was discovered in Das U-Boot through 2019.07.

    CriticalCVSS 9.1No exploitEPSS 2%

    denx · u-bootJul 31, 2019

  • CVE-2026-29009
    35Monitor

    U-Boot < 2026.07-rc2 Buffer Overflow in nfs_readlink_reply() via NFS READLINK

    HighCVSS 8.8No exploitEPSS 0%

    denx · u-bootJul 8, 2026

  • CVE-2026-46728
    35Monitor

    Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.

    HighCVSS 8.8No exploitEPSS 0%

    denx · u-bootMay 16, 2026

  • CVE-2026-29008
    34Monitor

    U-Boot 2026.04-rc3 Integer Underflow DoS via tcp_rx_state_machine()

    HighCVSS 8.7No exploitEPSS 0%

    denx · u-bootJul 8, 2026

  • CVE-2019-13106
    32Monitor

    Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack

    HighCVSS 7.8No exploitEPSS 1%

    denx · u-bootAug 6, 2019

  • CVE-2024-42040
    32Monitor

    Buffer Overflow vulnerability in the net/bootp.c in DENEX U-Boot from its initial commit in 2002 (3861aa5) up to today on any platform allow

    HighCVSS 8.1No exploitEPSS 0%

    denx · u-bootAug 23, 2024

  • CVE-2020-10648
    31Monitor

    Das U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a craft

    HighCVSS 7.8No exploitEPSS 1%

    denx · u-bootMar 19, 2020

  • CVE-2019-13105
    31Monitor

    Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.

    HighCVSS 7.8No exploitEPSS 1%

    denx · u-bootAug 6, 2019