CVE-2025-70290

An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or arbitrary code execution during the boot process.

CVSS v3 9.8 CRITICAL

9.8^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
http://u-boot.com
https://gist.github.com/c0zy1/4d9648d10a5ff07bda2771ea1298e469

Configurations

No configuration.

History

26 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) Se descubrió un problema en Denx U-Boot versiones anteriores a la 2026.04. Existe una vulnerabilidad de desbordamiento de entero en el soporte del sistema de archivos ZFS que puede activarse mediante metadatos en disco malformados. El problema puede resultar en una asignación de memoria incorrecta seguida de un acceso a memoria fuera de los límites, lo que podría provocar un bloqueo o ejecución de código arbitrario durante el proceso de arranque.

Information

Published : 2026-08-26 20:16

Updated : 2026-10-26 21:10

NVD link : CVE-2025-70290

Mitre link : CVE-2025-70290

CVE.ORG link : CVE-2025-70290

JSON object : View

Products Affected

No product.

CWE

CWE-190

Integer Overflow or Wraparound

CWE-787

Out-of-bounds Write

{"id": "CVE-2025-70290", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-70290", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2026-08-27T19:10:07.958597Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}], "published": "2026-08-26T20:16:59.550", "references": [{"url": "http://u-boot.com", "source": "cve@mitre.org"}, {"url": "https://gist.github.com/c0zy1/4d9648d10a5ff07bda2771ea1298e469", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-190"}, {"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "An issue was discovered in Denx U-Boot before 2026.04. An integer overflow vulnerability in the ZFS filesystem support can be triggered by malformed on-disk metadata. The issue may result in incorrect memory allocation followed by out-of-bounds memory access, potentially leading to a crash or arbitrary code execution during the boot process."}, {"lang": "es", "value": "Se descubri\u00f3 un problema en Denx U-Boot versiones anteriores a la 2026.04. Existe una vulnerabilidad de desbordamiento de entero en el soporte del sistema de archivos ZFS que puede activarse mediante metadatos en disco malformados. El problema puede resultar en una asignaci\u00f3n de memoria incorrecta seguida de un acceso a memoria fuera de los l\u00edmites, lo que podr\u00eda provocar un bloqueo o ejecuci\u00f3n de c\u00f3digo arbitrario durante el proceso de arranque."}], "lastModified": "2026-10-26T21:10:00.170", "sourceIdentifier": "cve@mitre.org"}