DENX Software Engineering U-boot 2022.07 Release Candidate 2
Approved changes feed: RSS · Atom
cpe:2.3:a:denx:u-boot:2022.07:rc2:*:*:*:*:*:*part: a version: 2022.07 update: rc2
| Vendor | Denx (e8e1a7d3-8644-5bb6-8075-a4c538aa0f7e) |
|---|---|
| Product | U Boot (10f9b016-b028-55b7-bd79-e93c32759ba0) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:denx/u-boot/u-boot |
purl2cpe | 2026-06-01 10:11:22.247731 |
pkg:github/u-boot/u-boot |
purl2cpe | 2026-06-01 10:11:22.247732 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-34835 |
vulnerable | 2026-06-08 05:46:03.644835 |
Details available
In Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the "i2c md" command enables the corruption of the return address pointer of the do_i2c_md function.
Published: 2022-06-29T23:48:51.000Z
Updated: 2026-05-12T10:12:28.638Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33967 |
vulnerable | 2026-06-08 05:44:51.900178 |
Details available
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
Published: 2022-07-20T06:15:22.000Z
Updated: 2025-11-03T19:27:07.915Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-33103 |
vulnerable | 2026-06-08 05:44:46.222982 |
Details available
Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().
Published: 2022-07-01T11:36:55.000Z
Updated: 2025-11-03T19:27:06.483Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-30767 |
vulnerable | 2026-06-08 05:43:39.703592 |
Details available
nfs_lookup_reply in net/nfs.c in Das U-Boot through 2022.04 (and through 2022.07-rc2) has an unbounded memcpy with a failed length check, leading to a buffer overflow. NOTE: this issue exists because of an incorrect fix for CVE-2019-14196.
Published: 2022-05-16T02:13:47.000Z
Updated: 2025-11-03T19:27:03.693Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.