ChangeIntel IT change radar

Public mode

No access to your tenant or devices. Every item links to its source. What this means

CVE-2026-74225

U-Boot before 2026.10-rc5 Out-of-Bounds Write via DHCPv6

CVSS 4.0 7.1 HIGHCVSS 3.1 7.1 HIGHCheck source for fixed versionsKEV status unknown

Original advisory

Historical advisory recorded 23 Oct 2026 15:48:27 UTC. Read the latest advisory.

cve-program · CVE-2026-74225

Published

U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and CLIENTID option lengths from DHCPv6 packets. Attackers on the local network can send crafted DHCPv6 ADVERTISE or REPLY packets during netboot to corrupt memory and crash the bootloader.

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-74225

Published

u-boot

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "u-boot",
                    "product": "u-boot",
                    "repo": "https://github.com/u-boot/u-boot",
                    "packageURL": "pkg:github/u-boot/u-boot",
                    "defaultStatus": "unaffected",
                    "versions": [
                        {
                            "version": "0",
                            "lessThan": "2026.10-rc5",
                            "status": "affected",
                            "versionType": "custom"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON