NVD security advisoryHigh
High advisory for In the bootloader download module
CVE-2026-80335 · Reported 4 Nov 2026
Full advisory details, affected packages, severity context, and original source.
Affected technology
In the bootloader download moduleAffected product
Advisory overview
In the bootloader download module, there is a possible out-of-bounds write due to a failure to reset a global offset variable during firmware update sessions. This could lead to heap memory corruption, system crash, or potential arbitrary code execution with no additional execution privileges needed.
