An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.Referenceshttps://gitlab.com/u-boot/u-boothttps://blog.semmle.com/uboot-rce-nfs-vulnerability/