CVE-2026-74222 | U-Boot up to 2026.10-rc4 wget httpc_recv_cb use after free

September 30, 2026 Yanac

A vulnerability identified as critical has been detected in U-Boot up to 2026.10-rc4. This impacts the function httpc_recv_cb of the component wget. This manipulation causes use after free.

This vulnerability is registered as CVE-2026-74222. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More