squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
2022-07-20T07:15:08.667
2024-11-21T07:08:41.183
Modified
CVSSv3.1: 7.8 (HIGH)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Application | denx | u-boot | 2020.10 | Yes |
| Application | denx | u-boot | 2020.10 | Yes |
| Application | denx | u-boot | 2020.10 | Yes |
| Application | denx | u-boot | 2020.10 | Yes |
| Application | denx | u-boot | 2021.01 | Yes |
| Application | denx | u-boot | 2021.01 | Yes |
| Application | denx | u-boot | 2021.01 | Yes |
| Application | denx | u-boot | 2021.01 | Yes |
| Application | denx | u-boot | 2021.01 | Yes |
| Application | denx | u-boot | 2021.01 | Yes |
| Application | denx | u-boot | 2021.04 | Yes |
| Application | denx | u-boot | 2021.04 | Yes |
| Application | denx | u-boot | 2022.01 | Yes |
| Application | denx | u-boot | 2022.01 | Yes |
| Application | denx | u-boot | 2022.01 | Yes |
| Application | denx | u-boot | 2022.01 | Yes |
| Application | denx | u-boot | 2022.01 | Yes |
| Application | denx | u-boot | 2022.04 | Yes |
| Application | denx | u-boot | 2022.04 | Yes |
| Application | denx | u-boot | 2022.04 | Yes |
| Application | denx | u-boot | 2022.04 | Yes |
| Application | denx | u-boot | 2022.04 | Yes |
| Application | denx | u-boot | 2022.04 | Yes |
| Application | denx | u-boot | 2022.07 | Yes |
| Application | denx | u-boot | 2022.07 | Yes |
| Application | denx | u-boot | 2022.07 | Yes |
| Application | denx | u-boot | 2022.07 | Yes |
| Application | denx | u-boot | 2022.07 | Yes |