Unpatched Critical Flaws Disclosed in U-Boot Bootloader for Embedded Devices

The issues, which were uncovered in the IP defragmentation algorithm implemented in U-Boot by NCC Group, could be abused to achieve arbitrary out-of-bounds write and denial-of-service (DoS).