ZeroHour

CVE-2024-57257

CVSS 3.1
2.4 low
EPSS
<1%p23
Published
()
Modified
Description

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.

Vendors
denx
Products
u-boot
Weakness
CWE-674
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

In the news

No ingested article mentions this CVE yet.