CVE-2019-14199

Critical

Published: 31/07/2019(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

An issue was discovered in Das U-Boot through 2019.07 related to unbounded memory copying when parsing a UDP packet. This issue is due to an integer underflow in net_process_received_packet during an udp_packet_handler call.

Risk Assessment

This vulnerability may lead to unexpected system behavior, which could be exploited by an attacker to perform DoS attacks or execute malicious code.

Recommendation

It is recommended to update to the latest version of Das U-Boot to mitigate this vulnerability and to monitor the system for unauthorized activities.

Original NVD description (English source)

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.