CVE-2026-71972 | U-Boot up to 2026.10-rc5 BMP image video_bmp.c video_display_rle8_bitmap out-of-bounds write

A vulnerability has been found in U-Boot up to 2026.10-rc5 and classified as problematic. This vulnerability affects the function video_display_rle8_bitmap of the file drivers/video/video_bmp.c of the component BMP image Handler. This manipulation causes out-of-bounds write.

The identification of this vulnerability is CVE-2026-71972. The attack can only be executed locally. There is no exploit available.VulDB Recent EntriesRead More