high8.2
CVE-2026-46728
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Impact
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Denx | U-Boot | from 2013.07 before 2026.04 Version 2026.04 |