CVE-2019-11059

CRITICAL 9.8CVE-2019-11059 · Published 10/05/2019 · updated 17/06/2026

In short

CVE-2019-11059 is a CRITICAL (CVSS 9.8) vulnerability affecting u-boot (denx).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
u-boot denx	`= 2016.11≥ 2016.11, ≤ 2019.04`	No fix yet

Das U-Boot 2016.11-rc1 through 2019.04 mishandles the ext4 64-bit extension, resulting in a buffer overflow.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.