CVE-2019-13105

2019-08-0620:15:12

Google

osv.dev

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

45.5%

JSON

Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.

CPENameOperatorVersion
u-booteqU-Boot-0_4_0
u-booteq2017.03-rc2
u-booteq2017.11-rc4
u-booteq2018.01-rc3
u-booteq2016.05-rc1
u-booteq2014.07
u-booteq2015.01
u-booteq2009.01-rc2
u-booteqLABEL_2003_04_15_1900
u-booteqLABEL_2003_06_29_0145

Name	Operator	Version
u-boot	eq	U-Boot-0_4_0
u-boot	eq	2017.03-rc2
u-boot	eq	2017.11-rc4
u-boot	eq	2018.01-rc3
u-boot	eq	2016.05-rc1
u-boot	eq	2014.07
u-boot	eq	2015.01
u-boot	eq	2009.01-rc2
u-boot	eq	LABEL_2003_04_15_1900
u-boot	eq	LABEL_2003_06_29_0145