# CVE-2019-14192: Das U-Boot integer underflow in UDP packet parsing

Source: https://junglewise.ai/threats/cve-2019-14192-das-u-boot-integer-underflow-in-udp-packet-parsing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2019-07-31. Updated: 2026-05-12  
License: CC BY 4.0 with a link back

CVE-2019-14192 · Severity: critical · CVSS 9.8 · Published 2019-07-31

A vulnerability was found in the U-Boot bootloader, which is widely used in embedded systems and networking hardware to start the operating system. An attacker could send specially crafted network traffic to take full control of the device before the main security protections of the operating system even begin to run. This could lead to permanent device compromise, data theft, or complete service disruption.

Technologies: [Denx U-Boot](https://junglewise.ai/threats/technologies/u-boot), [Siemens ROX II](https://junglewise.ai/threats/technologies/rox-ii). Vendors: [Denx](https://junglewise.ai/threats/vendors/denx), [Siemens](https://junglewise.ai/threats/vendors/siemens).

## Quick answers

**Is CVE-2019-14192 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2019-14192 being exploited in the wild.

**How severe is CVE-2019-14192?** Critical severity, with a CVSS score of 9.8, published 31 July 2019.

**Which products and versions are affected?** Siemens ROX II before 2.17.1.

**Is there a fix for CVE-2019-14192?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2019-14192 attacked?** It is attacked over the network, in device firmware.

**Am I affected by CVE-2019-14192?** Check whether you run Denx U-Boot or Siemens ROX II at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

An integer underflow vulnerability exists in Das U-Boot through version 2019.07 within the net_process_received_packet function. The flaw is triggered during an nc_input_packet call when parsing incoming UDP packets, leading to an unbounded memcpy operation. A remote, unauthenticated attacker can exploit this by sending malicious UDP packets to a device running the vulnerable bootloader. This results in an out-of-bounds write (stack or heap-based buffer overflow), potentially allowing for remote code execution (RCE) in the pre-boot environment. Siemens has also identified this vulnerability as affecting several Ruggedcom Rox II industrial networking products, which have been patched in version 2.17.1.

## Affected products

- Das U-Boot U-Boot through 2019.07
- Siemens Ruggedcom Rox II family before 2.17.1

## Timeline

- 2019-07-31: disclosed
- 2019-07-31: advisory
- 2026-05-12: other: Siemens published a downstream advisory for Ruggedcom products.

## References

- [https://blog.semmle.com/uboot-rce-nfs-vulnerability/](https://blog.semmle.com/uboot-rce-nfs-vulnerability/)
- [https://gitlab.com/u-boot/u-boot](https://gitlab.com/u-boot/u-boot)
- [https://cert-portal.siemens.com/productcert/html/ssa-577017.html](https://cert-portal.siemens.com/productcert/html/ssa-577017.html)

## Related threats

- [Denx U-Boot integer overflow in ext4fs_get_bgdtable](https://junglewise.ai/threats/cve-2025-70293-denx-u-boot-integer-overflow-in-ext4fs-get-bgdtable)
- [Denx U-Boot integer overflow in ZFS filesystem support](https://junglewise.ai/threats/cve-2025-70290-denx-u-boot-integer-overflow-in-zfs-filesystem-support)
- [Improper access control for volatile memory containing boot code in Universal Boot Loader (U-Boot) before 2017.11 and…](https://junglewise.ai/threats/cve-2025-24857-improper-access-control-for-volatile-memory-containing-boot-code)
- [GNOME libxml2 stack overflow in XPath evaluation](https://junglewise.ai/threats/cve-2025-9714-gnome-libxml2-stack-overflow-in-xpath-evaluation)
- [Das U-Boot integer overflows in memory allocator](https://junglewise.ai/threats/cve-2024-57258-das-u-boot-integer-overflows-in-memory-allocator)