Description
U-Boot through 2026.10-rc5 contains an out-of-bounds write vulnerability in the video_display_rle8_bitmap function in drivers/video/video_bmp.c. Attackers can supply a crafted RLE8-compressed BMP image to corrupt memory adjacent to the framebuffer and crash the bootloader.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
u-boot u-boot
Default version status: unaffected
0 to ≤ 2026.10-rc5affected
pkg:github/u-boot/u-bootReferences
- https://github.com/u-boot/u-boot/commit/5201e83342d64c2f438ea35158575f28225e752e ↗
- https://github.com/u-boot/u-boot/blob/v2026.10-rc5/drivers/video/video_bmp.c#L126 ↗
- https://github.com/u-boot/u-boot ↗
- https://www.vulncheck.com/advisories/u-boot-through-2026.10-rc5-out-of-bounds-write-in-bmp-rle8-decoder ↗