CVE-2019-14192

An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.

Date published : 2019-07-31

https://blog.semmle.com/uboot-rce-nfs-vulnerability/

https://gitlab.com/u-boot/u-boot