CVE-2026-127928 | MCU-Tools MCUboot up to 2.4.x Serial Recovery boot_serial_encryption.c information disclosure

A vulnerability, which was classified as problematic, has been found in MCU-Tools MCUboot up to 2.4.x. Affected by this issue is the function decrypt_image_inplace/boot_image_validate_encrypted of the file boot/boot_serial/src/boot_serial_encryption.c of the component Serial Recovery. This manipulation causes information disclosure.

This vulnerability is handled as CVE-2026-127928. It is possible to launch the attack on the local host. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More