CVE-2019-14194

Critical

Published: 31/07/2019(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.

Risk Assessment

This vulnerability may lead to unexpected system behavior, including potential buffer overflows, which could be exploited by an attacker to execute malicious code.

Recommendation

It is recommended to update to the latest version of Das U-Boot to mitigate this vulnerability and conduct a code audit to identify similar issues.

Original NVD description (English source)

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.