CVE-2026-71974Published
U-Boot before 2026.10-rc3 Out-of-Bounds Write via Android Bootmeth Partition Read
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-71974 · Microsoft / collected KEV context
cve-program · CVE-2026-71974
- https://github.com/u-boot/u-boot/commit/35432ef6fe2c79ab72709966e64815a45eb55c76
- https://github.com/u-boot/u-boot/blob/v2026.07/boot/bootmeth_android.c#L356
- https://patch.msgid.link/[email protected]
- https://github.com/u-boot/u-boot
- https://www.vulncheck.com/advisories/u-boot-before-2026.10-rc3-out-of-bounds-write-via-android-bootmeth-partition-read
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.