Six new U-Boot vulnerabilities could let attackers crash devices or execute code at boot

Researchers at Binarly discover six new flaws in the U-Boot bootloader used in routers, smart cameras, and server management chips. Four can crash devices; two allow remote code execution via malicious images.

• New U-Boot flaws could enable stealthy firmware attacks
• Six New U-Boot Flaws Could Let Malicious Images Crash Devices or Run Code at Boot