Skip to content

Vendor

rauc vulnerabilities

1 published CVE affecting rauc, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0
Atom feed of rauc alerts

Products

Latest rauc CVEs

Newest publication first

  1. CVE-2026-34155 RAUC: Improper Signing of Plain Bundles Exceeding 2 GiB

    Published
    HighCVSS 7.2 EPSS 0.15%

    RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a b...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.