rauc up to 1.15.1 unsigned to signed conversion error

Summaryinfo

A vulnerability has been found in rauc up to 1.15.1 and classified as very critical. This impacts an unknown function. This manipulation causes unsigned to signed conversion error. This vulnerability is registered as CVE-2026-34155. Remote exploitation of the attack is possible. No exploit is available. The affected component should be upgraded.

Detailsinfo

A vulnerability classified as very critical was found in rauc up to 1.15.1. Affected by this vulnerability is an unknown part. The manipulation with an unknown input leads to a unsigned to signed conversion error vulnerability. The CWE definition for the vulnerability is CWE-196. The product uses an unsigned primitive and performs a cast to a signed primitive, which can produce an unexpected value if the value of the unsigned primitive can not be represented using a signed primitive. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

RAUC controls the update process on embedded Linux systems. Prior to version 1.15.2, RAUC bundles using the 'plain' format exceeding a payload size of 2 GiB cause an integer overflow which results in a signature which covers only the first few bytes of the payload. Given such a bundle with a legitimate signature, an attacker can modify the part of the payload which is not covered by the signature. This issue has been patched in version 1.15.2.

The advisory is shared at github.com. This vulnerability is known as CVE-2026-34155 since 03/25/2026. The exploitation appears to be easy. The attack can be launched remotely. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $0-$5k at the moment (estimation calculated on 04/02/2026).

The vulnerability scanner Nessus provides a plugin with the ID 304627 (Linux Distros Unpatched Vulnerability : CVE-2026-34155), which helps to determine the existence of the flaw in a target environment.

Upgrading to version 1.15.2 eliminates this vulnerability.

The vulnerability is also documented in the vulnerability database at Tenable (304627). Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Productinfo

Name

• rauc

Version

• 1.15.0
• 1.15.1

Website

• Product: https://github.com/rauc/rauc/

CPE 2.3info

• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Discussion