CVE-2026-74225 | U-Boot up to 2026.10-rc4 DHCPv6 dhcp6_parse_options SERVERID/CLIENTID out-of-bounds

A vulnerability labeled as critical has been found in U-Boot up to 2026.10-rc4. Affected is the function dhcp6_parse_options of the component DHCPv6. Such manipulation of the argument SERVERID/CLIENTID leads to out-of-bounds read.

This vulnerability is documented as CVE-2026-74225. The attack can be executed remotely. There is not any exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More