← Back

CVE-2024-57262

nvd nist
Published: Feb 19, 2025Modified: Jun 17, 2026Deferred

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitability: 0.5 / Impact: 6.0
Source: MITRE (Secondary)

Description

In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite, a related issue to CVE-2024-57256.

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (2)

Source: cve@mitre.org
Source: cve@mitre.org

Timeline

No history available yet.