CVE-2026-71974

Name of the Vulnerable Software and Affected Versions U-Boot versions prior to 2026.10-rc3

Description An out-of-bounds write occurs in the read slotted partition() function because the software fails to validate the image size against partition bounds. Attackers with physical access can use crafted boot media with oversized headers to write beyond the load buffer into bootloader memory on devices that lack Android Verified Boot protection.

Recommendations Update to version 2026.10-rc3 or later.