CVE-2026-16671 | mcu-tools MCUboot up to 2.4.x Split-Image Feature loader.c split_image_check out_hash buffer overflow

November 13, 2026 Yanac

A vulnerability classified as problematic was found in mcu-tools MCUboot up to 2.4.x. Affected by this vulnerability is the function split_image_check of the file boot/bootutil/src/loader.c of the component Split-Image Feature. The manipulation of the argument out_hash results in buffer overflow.

This vulnerability is known as CVE-2026-16671. Attacking locally is a requirement. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More