CVE-2026-74221

The record

U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS server responses. A malicious NFS server can send crafted READLINK replies with negative or oversized symlink length values to corrupt memory and crash the bootloader.

Affected packages

Related vulnerabilities

• CVE-2026-115921 Open Neural Network Exchange (ONNX) is an open standard for machine learning… CWE-195
• CVE-2026-74220 U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in… CWE-195
• CVE-2026-77406 RabbitMQ amqp091-go is a Go AMQP 0.9.1 client. CWE-195
• CVE-2026-18444 There is an integer conversion vulnerability resulting in an out-of-bounds read when… CWE-195
• CVE-2026-62959 Coturn is a free open source implementation of TURN and STUN Server. CWE-195
• CVE-2026-55737 Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP… CWE-195
• CVE-2026-55991 In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client… CWE-195
• CVE-2026-49840 FreeSWITCH is a Software Defined Telecom Stack enabling the digital transformation from… CWE-195