GCVE-110-BRLY-2026-044

Advisory Published

Vulnetix · Advisory published August 6, 2026

BRLY-2026-044 Medium U-Boot SPL (Secondary Program Loader) contains an out-of-bounds write vulnerability in the FIT image loading logic, allowing a potential attacker to execute arbitrary code in the context of the bootloader and bypass U-Boot Verified Boot.

Download JSON Open in Console

References

Out-of-bounds write in U-Boot SPL during FIT image loading because of unchecked properties of image external data

advisory

Browse GCVE Records

867 records in the GCVE database · Updated September 2, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON