CVE-2026-127916 | mcu-tools MCUboot up to 2.4.x Image Hashing boot_serial.c bootutil_img_hash memory corruption

A vulnerability classified as critical has been found in mcu-tools MCUboot up to 2.4.x. Affected is the function bootutil_img_hash of the file boot/boot_serial/src/boot_serial.c of the component Image Hashing. The manipulation leads to memory corruption.

This vulnerability is traded as CVE-2026-127916. It is possible to initiate the attack remotely. There is no exploit available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More