CVE-2019-13105: Denx U-Boot

High severity, CVSS 7.8. EPSS: 1.3% chance of exploitation in the next 30 days.

Das U-Boot versions 2019.07-rc1 through 2019.07-rc4 can double-free a cached block of data when listing files in a crafted ext4 filesystem.

Affected products

• Denx U-Boot: version 2019.07 only

Published 2019-08-06. Last modified 2026-06-17.