← Database

CVE-2024-57259

HIGH CVSS: 7.1 Published: 2025-02-18 Modified: 2026-06-17

Description

sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.

Affected Platforms

Denx U-Boot

Weakness Type

CWE-193

References