Barebox CVE-2021-37848

crypto/digest.c in Pengutronix barebox through 2021.07.0 leaks timing information because memcmp is used during digest v

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_req in fs/nfs.c because a length fiel

Pengutronix barebox through 2019.08.1 has a remote buffer overflow in nfs_readlink_reply in net/nfs.c because a length f

Pengutronix Barebox through v2020.05.0 has an out-of-bounds read in nfs_read_reply in net/nfs.c because a field of an in

Memory corruption in the barebox bootloader's EFI PE loader (efi/loader/pe.c) affects all versions prior to 2026.04.0, a

A signature bypass vulnerability exists in the barebox bootloader's FIT (Flattened Image Tree) image verification mechan

Denial of service in the barebox bootloader (all versions up to and including 2026.04.0) lets an attacker on the same br

Infinite loop denial-of-service in barebox's ext4 directory parser allows an attacker who can supply a crafted filesyste

Out-of-bounds read vulnerabilities in barebox's ext4 extent parsing allow an attacker who can supply a malformed ext4 fi