Monitor vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.8
CVE-2025-70293: Denx U-Boot may let attackers run code or crash system
CVE-2025-70293 · published 8 days ago
Summary
The boot loader software called Denx U‑Boot, versions before the 2026.04 release, does not correctly check the size of a data table when reading an EXT‑4 file system. This mistake can cause the program to write beyond the allocated memory, which could allow an attacker to make the device stop working or run their own code. Update to the latest U‑Boot version as soon as possible to fix the problem.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:16.04:LTS | canonical | u-boot | All versions |
| Ubuntu:18.04:LTS | canonical | u-boot | All versions |
| Ubuntu:20.04:LTS | canonical | u-boot | All versions |
| Ubuntu:22.04:LTS | canonical | u-boot | All versions |
| Ubuntu:22.04:LTS | canonical | u-boot-nezha | All versions |
| Ubuntu:24.04:LTS | canonical | u-boot | All versions |
| Ubuntu:24.04:LTS | canonical | u-boot-nezha | All versions |
| Ubuntu:26.04:LTS | canonical | u-boot | All versions |
Original advisory text
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocation and this underallo...
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy() which could lead to arbitrary code execution, a denial of service, or other unspecified impacts.
References
- http://denx.com
- http://u-boot.com
- https://gist.github.com/c0zy1/4d9648d10a5ff07bda2771ea1298e469
- https://ubuntu.com/security/CVE-2025-70293 Third Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2025-70293 Third Party Advisory
Severity
9.8
Critical
Exploitation
EPSS <1%
Type
CWE-122Heap-based Buffer Overflow
CWE-190Integer Overflow
Timeline
Published26 Aug 2026
Updated2 Sep 2026
First seen26 Aug 2026
Monitor software like this
Free during beta