CVE-2026-74220

Katalog CVE

CVSS 8.2 · High EPSS 0,34%

Kerentanan Signed to Unsigned Conversion Error. Skor CVSS 3.1 8.2 (High) menurut vulncheck.com.

Deskripsi (NVD)

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the destination buffer, crashing the bootloader or corrupting memory.

Rincian

Terbit di NVD

29 September 2026

Terakhir diubah

30 September 2026

Status NVD

Awaiting Analysis

CVSS 3.1

8.2 (High), sumber vulncheck.com
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-195: Signed to Unsigned Conversion Error

EPSS (30 hari)

0,34% peluang dieksploitasi; lebih tinggi dari 25,4% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/u-boot/u-boot
• https://github.com/u-boot/u-boot/blob/v2026.07/net/nfs-common.c#L695
• https://github.com/u-boot/u-boot/commit/0bbf09859658b8cc9ac13be41af23b516b8ef69a
• https://www.vulncheck.com/advisories/u-boot-before-2026.10-rc5-buffer-overflow-via-nfs-read-reply