CVE-2019-14196

CVE-2019-14196

EPSS 2.2%

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://blog.semmle.com/uboot-rce-nfs-vulnerability/https://cert-portal.siemens.com/productcert/html/ssa-577017.html https://gitlab.com/u-boot/u-boot https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html