https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-09-30T19:22:53.041862+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-74222 CVE-2026-74222 — U-Boot before 2026.10-rc5 Use-After-Free in lwIP wget Receive Callback 2026-09-30T19:22:53.043767+00:00

Affected: u-boot

U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_recv_cb() function within the lwIP wget implementation. When HTTP data storage fails, the callback frees the connection PCB but returns ERR_BUF instead of ERR_ABRT, causing the TCP input path to access released memory and crash the bootloader.