critical9.8
CVE-2025-70293
An issue was discovered in Denx U-Boot before 2026.04.
Impact
An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability exists in function ext4fs_get_bgdtable, the size calculation can lead to under allocation and this underallocated buffer will be used in memcpy() which could lead to arbitrary code execution, a denial of service, or other unspecified impacts.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Denx | Denx U-Boot | before 2026.04. |
Versions were read from the advisory text. No structured product data has been published for this record yet.