CVE-2026-74220
Last modified
CVE-2026-74220 is a high-severity vulnerability rated 8.2/10 on the CVSS scale. U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the destination buffer, crashing the bootloader or corrupting memory..
Description
U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() function in net/nfs-common.c that allows attackers to corrupt memory by supplying crafted NFS READ reply lengths. A malicious NFS server can exploit signed integer handling to bypass length validation and write far past the destination buffer, crashing the bootloader or corrupting memory.
Metrics
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| u-boot | u-boot | < 2026.10-rc5 |
References
Timeline
- Published
- Last Modified
- Status
- Awaiting Analysis
Frequently Asked Questions
What is CVE-2026-74220?
How severe is CVE-2026-74220?
How do I fix CVE-2026-74220?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-7417A vulnerability was found in Algovate xhs-mcp 0.8.11. This a…7.3
- CVE-2026-7418A vulnerability was determined in UTT HiPER 1250GW up to 3.2…8.8
- CVE-2026-7419A vulnerability was identified in UTT HiPER 1250GW up to 3.2…8.8
- CVE-2026-7420A security flaw has been discovered in UTT HiPER 1250GW up t…8.8
- CVE-2026-7421The Passeum Ticketing plugin for WordPress is vulnerable to …4.4
- CVE-2026-7422Insufficient packet validation in FreeRTOS-Plus-TCP before V…6.5
- CVE-2026-74221U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_…8.2
- CVE-2026-74222U-Boot before 2026.10-rc5 contains a use-after-free vulnerab…8.2
- CVE-2026-74225U-Boot before 2026.10-rc5 contains out-of-bounds memory acce…7.1
- CVE-2026-74226Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-74227Rejected reason: This CVE ID has been rejected or withdrawn …
- CVE-2026-74228Rejected reason: This CVE ID has been rejected or withdrawn …
Are you affected by CVE-2026-74220?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST