Description
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
References (5)
Core 5
Core References
Product x_refsource_misc
https://www.denx.de/project/u-boot/
Exploit, Mailing List, Vendor Advisory x_refsource_misc
https://lists.denx.de/pipermail/u-boot/2022-June/487467.html
Patch, Third Party Advisory, Vendor Advisory x_refsource_misc
https://source.denx.de/u-boot/u-boot/-/commit/7f7fb9937c6cb49dd35153bd6708872b390b0a44
Third Party Advisory x_refsource_misc
https://jvn.jp/en/vu/JVNVU97846460/index.html
Scores
CVSS v3
7.8
EPSS
0.0052
EPSS Percentile
40.2%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Details
CWE
CWE-787
Status
published
Products (6)
denx/u-boot
2020.10 rc2 (4 CPE variants)
denx/u-boot
2021.01 (6 CPE variants)
denx/u-boot
2021.04 rc1 (2 CPE variants)
denx/u-boot
2022.01 (5 CPE variants)
denx/u-boot
2022.04 (6 CPE variants)
denx/u-boot
2022.07 rc1 (5 CPE variants)
Published
Jul 20, 2022
Tracked Since
Feb 18, 2026