mcu-tools vulnerabilities

Every vulnerability this feed holds for mcu-tools, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.

8 vulnerabilities tracked.

5.1 MCUboot's Zephyr serial-recovery upload handler bsupload() in boot/bootserial/src/bootserial.c decodes the host-supplied image field of an… CVE-2026-16664 13 Nov 2026
4.0 MCUboot's serial-recovery image-upload handler bsupload() in boot/bootserial/src/bootserial.c declares const struct flasharea fap = NULL… CVE-2026-16659 13 Nov 2026
2.9 bootutilimghash() computes the image digest over ihhdrsize + ihimgsize + ihprotecttlvsize bytes, all three taken from the candidate image's… CVE-2026-127916 13 Nov 2026
2.9 splitimagecheck() in boot/bootutil/src/loader.c declares a fixed uint8t loaderhash[32] buffer and passes it as the outhash out-parameter to… CVE-2026-16671 13 Nov 2026
2.4 bootsavebootstatus() in boot/bootutil/src/bootrecord.c reads the image's EXPECTEDHASHTLV into a stack buffer imagehash[IMAGEHASHSIZE] that… CVE-2026-16662 13 Nov 2026
2.0 The MCUboot TLV iterator bootutiltlviternext() in boot/bootutil/src/tlv.c walks image trailer TLVs with a single loop guard (it->tlvoff… CVE-2026-127915 13 Nov 2026
2.0 When MCUboot is built with the TinyCrypt crypto backend (MCUBOOTUSETINYCRYPT), bootutilaesctrdrop() in… CVE-2026-128091 13 Nov 2026
2.0 In MCUboot's serial-recovery encrypted-image support (boot/bootserial/src/bootserialencryption.c), decryptimageinplace() and… CVE-2026-127928 13 Nov 2026

What this covers

This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that mcu-tools is free of vulnerabilities.

Query this from an agent over MCP · Check a lockfile by version

Other vendors tracked here

Microsoft Linux Red Hat n/a Google Apple Apache Software Foundation Oracle Corporation zephyrproject Unknown FFMPEG Fortinet IBM Adobe Drupal SAP_SE Cisco Eclipse Foundation erlang OpenEMR AMD Grafana hickory-dns n8n-io