Critical U-Boot Vulnerabilities Undermine Secure Boot on Millions of Devices

Binarly’s research team identified six vulnerabilities in U-Boot, an open-source bootloader used in home routers, smart cameras, server management controllers, and embedded hardware. Two of the flaws enable code execution during boot image verification, undermining secure boot protections. The vulnerabilities affect over 50 U-Boot releases, though no specific CVE IDs or release dates were disclosed. The impact spans millions of devices across consumer, enterprise, and industrial environments. The findings highlight risks to the integrity of the boot process, potentially allowing attackers to bypass security mechanisms.