Skip to content
OpenAdvisories

Vendor

barebox

5 known vulnerabilities.

Products

barebox 5
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.4
    CVE-2026-34963

    barebox EFI PE Loader Memory Safety Vulnerabilities

    barebox version prior to 2026.04.0 contains multiple memory-safety vulnerabilities in the EFI PE loader in efi/loader/pe.c where integer overflow in virtual image size computation using 32-bit arithmetic on section VirtualAddress and size values allows unders…

    barebox barebox
  • High 8.3
    CVE-2026-33243

    barebox: FIT Signature Verification Bypass Vulnerability

    barebox is a bootloader. In barebox from version 2016.03.0 to before version 2026.03.1 (and the corresponding backport to 2025.09.3), an attacker could exploit a FIT signature verification vulnerability to trick the bootloader into booting different images th…

    barebox barebox