Known Vulnerabilities for Bootloader by Unisoc Shanghai Technologies Co. Ltd.
Listed below are 10 of the newest known vulnerabilities associated with "Bootloader" by "Unisoc Shanghai Technologies Co. Ltd.".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-102370 json | Kasa EC70 v4 and EC71 v4 do not logically disable the production debug interface at the firmware or chip level and do not loc... | Not Provided | 2026-10-01 | 2026-10-01 |
| CVE-2026-90112 json | In the Linux kernel, the following vulnerability has been resolved: net: qlcnic: validate unified ROM sections before loadin... | Not Provided | 2026-09-17 | 2026-10-30 |
| CVE-2026-85478 json | A CM2507 IP camera running firmware version HMT.CM2507 v251211.1507 exposes an interactive bootloader through a physical debu... | Not Provided | 2026-09-18 | 2026-09-21 |
| CVE-2026-85083 json | The ANJIA AJL33PC0801 IP camera uses a hard-coded credential for bootloader authentication. An attacker with physical access ... | Not Provided | 2026-09-11 | 2026-09-11 |
| CVE-2026-82017 json | IGEL OS 12 before 12.7.6 and IGEL OS 11 before 11.11.150 contain a boot registry parameter injection vulnerability that allow... | Not Provided | 2026-08-28 | 2026-09-24 |
| CVE-2026-80335 json | In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable... | Not Provided | 2026-11-04 | 2026-11-04 |
| CVE-2026-80253 json | An improper physical access control issue exists in ShizenBox2 (dev-conf). If exploited, an attacker with physical access to ... | Not Provided | 2026-09-03 | 2026-09-03 |
| CVE-2026-74225 json | U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_options() that fails to validate SERVERID and C... | Not Provided | 2026-09-29 | 2026-09-30 |
| CVE-2026-74222 json | U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implem... | Not Provided | 2026-09-29 | 2026-10-02 |
| CVE-2026-74221 json | U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() function in net/nfs-common.c when processing NFS... | Not Provided | 2026-09-29 | 2026-09-30 |