{"id":"CVE-2021-27138","details":"The boot loader in Das U-Boot before 2021.04-rc2 mishandles use of unit addresses in a FIT.","modified":"2026-05-17T03:54:39.325229342Z","published":"2021-02-17T23:15:13.717Z","database_specific":{},"references":[{"type":"WEB","url":"https://lists.debian.org/debian-lts-announce/2025/09/msg00037.html"},{"type":"FIX","url":"https://github.com/u-boot/u-boot/commit/3f04db891a353f4b127ed57279279f851c6b4917"},{"type":"FIX","url":"https://github.com/u-boot/u-boot/commit/79af75f7776fc20b0d7eb6afe1e27c00fdb4b9b4"},{"type":"FIX","url":"https://github.com/u-boot/u-boot/commit/b6f4c757959f8850e1299a77c8e5713da78e8ec0"}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}]}