CVE-2022-33967 | BDVDB-2026-180639 Detail

Description#

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12022-07-20Record published in the CVE List.
2. Version 22025-11-03Most recent update recorded in the CVE List.