CVE-2019-14196 - An issue was discovered in Das U-Boot through 2019.07

CRITICAL

An issue was discovered in Das U-Boot through 2019.07

Published Jul 31, 2019

9.8

CRITICAL

CVSS 3.0

EPSS 2.14%

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.

No remediation recorded yet.

Weaknesses (1)

CWE-787

Out-of-bounds Write

Link	Providers	Tags
https://blog.semmle.com/uboot-rce-nfs-vulnerability/		x_refsource_MISCThird Party Advisory
https://cert-portal.siemens.com/productcert/html/ssa-577017.html
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-5446		Advisory
https://gitlab.com/u-boot/u-boot		x_refsource_MISCThird Party Advisory
https://lists.debian.org/debian-lts-announce/2025/05/msg00001.html

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 31, 2019

Updated May 12, 2026

Reserved Jul 19, 2019

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jul 31, 2019

Updated May 12, 2026

GitHub

No data