Vulnerability Database
Blog
FAQ
Docs
arrow_forward
search
light_mode
dark_mode
CVE-2021-27097
See a problem?
Please try reporting it
to the source
first.
Source
https://cve.org/CVERecord?id=CVE-2021-27097
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2021-27097.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2021-27097
Downstream
ALPINE-CVE-2021-27097
DEBIAN-CVE-2021-27097
DLA-4320-1
OESA-2021-1130
UBUNTU-CVE-2021-27097
Published
2021-02-17T23:15:13Z
Modified
2026-05-17T03:54:53Z
Severity
7.8 (High)
CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS Calculator
Summary
[none]
Details
The boot loader in Das U-Boot before 2021.04-rc2 mishandles a modified FIT.
References
https://lists.debian.org/debian-lts-announce/2025/09/msg00037.html
https://github.com/u-boot/u-boot/commit/6f3c2d8aa5e6cbd80b5e869bbbddecb66c329d01
https://github.com/u-boot/u-boot/commit/8a7d4cf9820ea16fabd25a6379351b4dc291204b
https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0
Affected packages
CVE-2021-27097 - OSV