CVE-2026-16662 | mcu-tools mcuboot up to 2.4.x Boot Record boot_record.c boot_save_boot_status uninitialized resource

November 13, 2026 Yanac

A vulnerability, which was classified as problematic, was found in mcu-tools mcuboot up to 2.4.x. This affects the function boot_save_boot_status of the file boot/bootutil/src/boot_record.c of the component Boot Record. Such manipulation leads to uninitialized resource.

This vulnerability is uniquely identified as CVE-2026-16662. Local access is required to approach this attack. No exploit exists.

You should upgrade the affected component.VulDB Recent EntriesRead More