THREAT OPS › Threat News › Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)
Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)
<p>Posted by t.preissl on Aug 28</p>-----BEGIN SECURITY ADVISORY-----<br /> <br /> Title: Multiple Integer Overflows in U-Boot Filesystem Handling<br /> Author: Timo Preißl <t.preissl () proton me><br /> Date: 2026-02-11<br /> CVEs: CVE-2025-70290, CVE-2025-70291, CVE-2025-70292, CVE-2025-70293<br /> Affected: Denx U-Boot <= v2026.01-rc4<br /> Fixed in: v2026.04-rc1 (commit adccdb2)<br />
MITRE ATT&CK techniques
- VulnerabilitiesT1588.006
Indicators of compromise
- CVE-2025-70290cve
- CVE-2025-70293cve
- CVE-2025-70291cve
- CVE-2025-70292cve
Original source: https://seclists.org/oss-sec/2026/q3/607
Same event, other sources
- [ADVISORY] Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)fulldisclosure · 2026-08-30
- Multiple Integer Overflows in U-Boot Filesystem Parsing (CVE-2025-70290 through CVE-2025-70293)fulldisclosure · 2026-08-30