What’s Vulnerable › Vulnerabilities

CVE-2019-11059

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-05-10 · updated 2026-06-17
• Weakness: CWE-119

Description

Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.

Affected products

• u-boot: from 2016.11 through 2019.04; 2016.11-rc1, 2016.11-rc2, 2016.11-rc3

References

• https://git.denx.de/?p=u-boot.git%3Ba=commit%3Bh=febbc583319b567fe3d83e521cc2ace9be8d1501
• https://github.com/u-boot/u-boot/commits/master
• https://git.denx.de/?p=u-boot.git%3Ba=commit%3Bh=febbc583319b567fe3d83e521cc2ace9be8d1501
• https://github.com/u-boot/u-boot/commits/master

Get alerted when CVE-2019-11059 or the next vulnerability affects your stack