Six U‑Boot FIT Bugs Enable Firmware Takeover or Device Crash
Binarly uncovered six new flaws in the U‑Boot bootloader’s FIT signature verification, four causing denial‑of‑service crashes and two permitting arbitrary code execution before the OS loads. The bugs affect releases back to 2013, putting routers, BMCs, IoT gear and servers at risk of stealthy firmware attacks.