fr Sign in

Not rated

CVE-2019-13106 Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem,…

Description

Das U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.

Affected products and versions

Product	Affected versions	Fixed in
n/a	Versions not published
RUGGEDCOM ROX MX5000 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX MX5000RE 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX RX1400 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX RX1500 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX RX1501 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX RX1510 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX RX1511 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX RX1512 2.17	earliest → < 2.17.1	2.17.1

Show the 3 other branches

Product	Affected versions	Fixed in
RUGGEDCOM ROX RX1524 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX RX1536 2.17	earliest → < 2.17.1	2.17.1
RUGGEDCOM ROX RX5000 2.17	earliest → < 2.17.1	2.17.1

References

github.com github.com
lists.denx.de lists.denx.de
gist.github.com gist.github.com
openSUSE-SU-2019:2233 lists.opensuse.org
openSUSE-SU-2019:2235 lists.opensuse.org

Timeline

Published August 6, 2019
Last modified May 12, 2026

The 144658 CVEs of n/a →

CVE-2026-106713 An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the… Not rated CVE-2026-106715 NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin… Not rated CVE-2026-106714 Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it… Not rated CVE-2026-106716 ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep… Not rated

Track this CVE