CVE-2025-70293
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocatio…
Published: 2026-08-26 · CVSS: 9.8 · CVSS 3.1
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy() which could lead to arbitrary code execution, a denial of service, or other unspecified impacts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7