| Package | Affected versions | Patched versions |
|---|---|---|
| u-boot | = 2020.10= 2021.01= 2021.04= 2022.01= 2022.04= 2022.07 |
squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free