Known Vulnerabilities for Mcuboot by Mcu-tools
Listed below are 9 of the newest known vulnerabilities associated with "Mcuboot" by "Mcu-tools".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-128091 json | When MCUboot is built with the TinyCrypt crypto backend (MCUBOOT_USE_TINYCRYPT), bootutil_aes_ctr_drop() in boot/bootutil/inc... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127928 json | In MCUboot's serial-recovery encrypted-image support (boot/boot_serial/src/boot_serial_encryption.c), decrypt_image_inplace()... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127916 json | bootutil_img_hash() computes the image digest over ih_hdr_size + ih_img_size + ih_protect_tlv_size bytes, all three taken fro... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-127915 json | The MCUboot TLV iterator bootutil_tlv_iter_next() in boot/bootutil/src/tlv.c walks image trailer TLVs with a single loop guar... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-19737 json | i2s_esp32_trigger_check() in drivers/i2s/i2s_esp32.c validates the requested direction only for I2S_DIR_BOTH. The I2S_DIR_RX ... | Not Provided | 2026-10-11 | 2026-10-16 |
| CVE-2026-16671 json | split_image_check() in boot/bootutil/src/loader.c declares a fixed uint8_t loader_hash[32] buffer and passes it as the out_ha... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-16664 json | MCUboot's Zephyr serial-recovery upload handler bs_upload() in boot/boot_serial/src/boot_serial.c decodes the host-supplied i... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-16659 json | MCUboot's serial-recovery image-upload handler bs_upload() in boot/boot_serial/src/boot_serial.c declares const struct flash_... | Not Provided | 2026-11-13 | 2026-11-13 |
| CVE-2026-14296 json | When using the Direct XIP update strategy, the main application image starts other cores (i.e. radio core), based on the curr... | Not Provided | 2026-09-07 | 2026-09-08 |