CVE-2019-14193

Critical

Published: 31/07/2019(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Das U-Boot through 2019.07 related to unbounded memcpy with an unvalidated length in the nfs_readlink_reply function. The issue occurs in the 'if' block after calculating the new path length.

Risk Assessment

This vulnerability may lead to uncontrolled memory overwrites, potentially resulting in system crashes or execution of malicious code. Organizations should be aware of the potential security risks.

Recommendation

It is recommended to update to the latest version of Das U-Boot to mitigate this vulnerability. A code audit should also be conducted to identify similar issues.

Original NVD description (English source)

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the "if" block after calculating the new path length.