MCUboot
Security Risk Profile
Security Risk Score
Comprehensive risk assessment based on 16 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from April 26, 2024 to present
Threat Assessment
Severity Distribution
Exploit Likelihood
Age Distribution
Common Weaknesses (CWE)
Most Affected Products
Recent Vulnerabilities
See more →MCUboot image hash span is not bounded against the slot, allowing a read past the flash area during image validation
MCUboot image hash span is not bounded against the slot, allowing a read past the flash area during image validation
TLV iterator does not bound each entry against the declared TLV area in MCUboot bootutil
TLV iterator does not bound each entry against the declared TLV area in MCUboot bootutil
Unchecked serial-recovery image index causes out-of-bounds slot-table read in MCUboot Zephyr port
Unchecked serial-recovery image index causes out-of-bounds slot-table read in MCUboot Zephyr port
Pre-authentication NULL pointer dereference in MCUboot serial-recovery image upload (encrypted-image builds)
Out-of-bounds stack write in MCUboot split-image validation with SHA-384/SHA-512 builds
Out-of-bounds stack write in MCUboot split-image validation with SHA-384/SHA-512 builds
Uninitialised bootloader stack disclosed into the measured-boot attestation record via a short EXPECTED_HASH TLV in MCUboot
Monitor MCUboot in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.