Out-of-Bounds Write Vulnerability in U-Boot Bootloader

CVE-2026-71974

What is CVE-2026-71974?

U-Boot versions prior to 2026.10-rc3 exhibit an out-of-bounds write vulnerability in the read_slotted_partition() function. This flaw arises from insufficient validation of the image size against the partition boundaries, which can be exploited by attackers with physical access. By supplying specially crafted boot media containing oversized headers, an attacker can potentially write beyond the allocated load buffer into the bootloader's memory, especially on systems lacking Android Verified Boot protection. This vulnerability can compromise the integrity of the boot process and the overall security of the device.

References