barebox
Security Risk Profile
52
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 8 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from February 17, 2025 to present
8
Total CVEs
5
Critical+High
0
Exploited
4
Unpatched
Threat Assessment
Avg CVSS
7.4
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
4
Critical/High
Risk Level
52/100
medium
Severity Distribution
Critical
0High
5Medium
2Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
1Age Distribution
Common Weaknesses (CWE)
1
Integer Overflow
3
2
Buffer Overflow
1
Most Affected Products
1. barebox barebox8
2. Pengutronix barebox6
3. DENX U-Boot4
Recent Vulnerabilities
See more →CVE-2026-34963
CVSS 8.6high
barebox EFI PE Loader Memory Safety Vulnerabilities
5/11/2026🔧 No Patch
CVE-2026-34962
CVSS 6.9medium
barebox ext4 Directory Parsing Infinite Loop Denial of Service
5/11/2026🔧 No Patch
CVE-2026-34961
CVSS 6.9medium
barebox ext4 Extent Parsing Out-of-Bounds Read
5/11/2026🔧 No Patch
CVE-2026-34960
CVSS 7.1high
barebox Out-of-Bounds Read in DHCP Option Parsing
5/11/2026🔧 No Patch
CVE-2026-33243
CVSS 8.3EPSS 0%high
barebox: FIT Signature Verification Bypass Vulnerability
3/20/2026
CVE-2024-57261
CVSS 7.1high
2/19/2025🔧 No Patch
CVE-2024-57262
CVSS 7.1high
2/19/2025🔧 No Patch
https://seclists.org/oss-sec/2025/q1/142
unknown
Multiple Vulnerabilities in Babox
2/17/2025🔧 No Patch
Monitor barebox in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.