Das U-Boot suffers from a buffer overread vulnerability. An attacker with access to the local network and faster response times than the default DHCP server can trigger a memory leak by responding with malicious DHCP offers to a vulnerable U-Boot DHCP client.
eeff70713d71d99b1f63f18864f92054909a4869b0f21dc708548d13aad4f07a