CVE-2026-35176

CVSS Score & Metrics

Base Score

7.1 / 10

Vector String

                                        CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H                                    

Vulnerability Description

openFPGALoader is a utility for programming FPGAs. In 1.1.1 and earlier, a heap-buffer-overflow read vulnerability exists in POFParser::parseSection() that allows out-of-bounds heap memory access when parsing a crafted .pof file. No FPGA hardware is required to trigger this vulnerability.

Vulnerability Details

Published Date

April 06, 2026

Last Modified

April 07, 2026

CWE ID

CWE-125

Source

NVD

Vendor

trabucayre

Product

openFPGALoader

External References

https://github.com/trabucayre/openFPGALoader/security/advisories/GHSA-9x7m-m8gv-px2j

CVSS Score & Metrics

Vulnerability Description

Vulnerability Details

External References

Discussion (0)

Add Comment