CVE-2019-14195

Critical

Published: 31/07/2019(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Das U-Boot through 2019.07 related to unbounded memcpy with unvalidated length in the nfs_readlink_reply function. The issue occurs in the 'else' block after calculating the new path length.

Risk Assessment

Exploitation of this vulnerability may lead to unauthorized memory access, potentially resulting in data leakage or system crashes. Organizations should be aware of the potential security risks.

Recommendation

It is recommended to update to the latest version of Das U-Boot to mitigate this vulnerability. Additionally, conducting a code audit to identify similar issues is advisable.

Original NVD description (English source)

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the "else" block after calculating the new path length.