July 12, 2026
- Binarly disclosed six vulnerabilities in U-Boot's FIT (Flattened Image Tree) signature verification, two allowing arbitrary code execution and four causing DoS. The flaws date back to U-Boot 2013.07 and affect 50+ stable releases plus numerous downstream vendor forks — a root-of-trust bypass across a huge embedded/device fleet. Binarly · Vulnerabilities & Exploits
in Exploit Chains, Poisoned Packages, and AI Agents Turned Against Their Owners