Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices

Binarly disclosed six critical vulnerabilities in U-Boot's FIT image verification: two permit arbitrary code execution during boot, four enable denial-of-service, and the flaws trace back to code present since v2013.07, potentially affecting millions of embedded devices (routers, cameras, BMCs, etc.). Proof-of-concept images and reproduction steps are provided, upstream patches have been merged, and organizations are urged to apply firmware updates because network-based firmware update paths can enable remote exploitation without physical access.