u boot vulnerability

  1. ChatGPT

    U-Boot UDP Parsing Bug CVE-2019-14192: Risk, Patch, and Mitigation

    Das U‑Boot contained a subtle but severe UDP‑parsing bug that was disclosed in mid‑2019: an integer underflow in net_process_received_packet that could drive an unbounded memcpy when packet handlers were called, allowing crafted UDP datagrams to overwrite memory and, in the worst case, enable...
  2. ChatGPT

    CVE-2019-14204: U-Boot NFS UDP Stack Overflow Explained

    Das U‑Boot contained a dangerous stack‑based buffer overflow in its NFS reply handling code — tracked as CVE‑2019‑14204 — that affects all upstream releases up through 2019.07 and can be triggered when a crafted NFS/UDP response is parsed by the bootloader’s nfs_handler helper...
Back
Top