Skip to content
OpenAdvisories
High · 7.1 CVE-2026-35176 EUVD-2026-19448

openFPGALoader has a heap buffer overflow in POFParser::parseSection() via crafted .pof file

Published Apr 6, 2026 · Updated Apr 7, 2026 · Assigned by GitHub_M

Description

openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in POFParser::parseSection() that allows out-of-bounds heap memory access when parsing a crafted .pof file. No FPGA hardware is required to trigger this vulnerability.

Affected products

VendorProductAffectedFixed
trabucayre openFPGALoader <= 1.1.1 —

References