← All advisories

High severity7.8NVD Advisory· Published Aug 6, 2019· Updated Jun 17, 2026

CVE-2019-13105

CVE-2019-13105

Description

Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

5

Denx/U Boot4 versions
cpe:2.3:a:denx:u-boot:2019.07:rc1:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:denx:u-boot:2019.07:rc1:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.07:rc2:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.07:rc3:*:*:*:*:*:*
- cpe:2.3:a:denx:u-boot:2019.07:rc4:*:*:*:*:*:*
U Boot/U Bootllm-fuzzy
Range: 2019.07-rc1 - 2019.07-rc4

Patches

Vulnerability mechanics

References

3

github.com/u-boot/u-boot/commits/masternvdPatchThird Party Advisory
lists.denx.de/pipermail/u-boot/2019-July/375513.htmlnvdMailing ListPatchVendor Advisory
gist.github.com/deephooloovoo/d91b81a1674b4750e662dfae93804d75nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.