Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Denx

First CVE: Jun 26, 2018Active for: 8 yearsTotal CVEs: 50
46.2
VTI Score
High

Denx develops U-Boot, the widely embedded bootloader that initializes hardware and loads operating systems across embedded systems, IoT devices, and enterprise network infrastructure. Vulnerabilities affecting this vendor skew strongly toward critical-severity outcomes, reflecting the privileged execution context and memory-unsafe parsing inherent to low-level firmware code. The exposure recurs through memory-safety weakness classes including out-of-bounds writes, integer overflows and underflows, and classic buffer overflows that arise from the bootloader's direct hardware interaction and minimal runtime constraints. Because U-Boot sits in the firmware boot chain of countless embedded devices, its flaws can compromise systems before the operating system loads, making timely remediation essential for defenders managing heterogeneous device inventories. Current severity, exploitation activity, and exposure counts are shown alongside this summary.

FAUCET AI Generated
50
Total CVEs
More Total CVEs than 98% of tracked vendors
6.3
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 98% of tracked vendors
8.0
Avg CVSS Score
Higher Avg CVSS Score than 78% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Denx over time

Volume of CVEsAvg CVSS Base Score
First CVE
Jun 26, 2018
8 years ago
Most Recent CVE
Jul 8, 2026
16 days ago

Products(1 total)

Top CVEs

Signals from CVEs in this vendor scope (50 CVEs).

50 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-29009CRITICAL
U-Boot through 2026.04-rc3 contains a buffer overflow vulnerability in nfs_readlink_reply() (net/nfs-common.c) when CONFIG_CMD_NFS is enabled, allowing a malicious or compromised N
Jul 8, 20269.840NONO
CVE-2026-46728HIGH
Das U-Boot before 2026.04 allows FIT (Flat Image Tree) signature verification bypass because hashed-nodes is omitted from a hash.
May 16, 20268.837NONO
CVE-2026-29008HIGH
U-Boot through 2026.04-rc3 contains an integer underflow vulnerability in the tcp_rx_state_machine() function (net/tcp.c) that allows a network-adjacent attacker to crash the bootl
Jul 8, 20267.535NONO
CVE-2022-34835CRITICAL
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointe
Jun 30, 20229.832NONO
CVE-2022-30767CRITICAL
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this i
May 16, 20229.832NONO
CVE-2019-14192CRITICAL
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_in
Jul 31, 20199.832NONO
CVE-2018-18439CRITICAL
DENX U-Boot through 2018.09-rc1 has a remotely exploitable buffer overflow via a malicious TFTP server because TFTP traffic is mishandled. Also, local exploitation can occur via a
Nov 20, 20189.832NONO
CVE-2020-8432CRITICAL
In Das U-Boot through 2020.01, a double free has been found in the cmd/gpt.c do_rename_gpt_parts() function. Double freeing may result in a write-what-where condition, allowing an
Jan 29, 20209.831NONO
CVE-2019-14202CRITICAL
An issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.
Jul 31, 20199.831NONO
CVE-2019-14194CRITICAL
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.
Jul 31, 20199.831NONO
View all 50 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products50 CVEs
22%
38%
38%
Severity distribution among all CVEs352,294 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local17 (34.0%)
Network23 (46.0%)
Unknown0 (0.0%)
Physical9 (18.0%)
Adjacent Network1 (2.0%)
Attack Complexity
Low46 (92.0%)
High4 (8.0%)
Unknown0 (0.0%)
User Interaction
None42 (84.0%)
Unknown0 (0.0%)
Required8 (16.0%)
Privileges Required
Low8 (16.0%)
High1 (2.0%)
None41 (82.0%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (50 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Denx.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Denx — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Denx's Products

View all 7 CNAs →

Top CWEs