← Back

CVE-2024-57254

nvd nist
Published: Feb 18, 2025Modified: Nov 3, 2025

JSON object

Loading...
6.8
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitability: 0.9 / Impact: 5.9
Source: NVD

Description

An integer overflow in sqfs_inode_size in Das U-Boot before 2025.01-rc1 occurs in the symlink size calculation via a crafted squashfs filesystem.

Affected (1)

Products: Denx: U Boot
Denx
1 product
U Boot
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
U Boot
Up to 2024.10

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (3)

Source: cve@mitre.org
Patch
Source: cve@mitre.org
Mailing ListMitigationThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.