PT-2025-6745

CVE-2024-57259

Published

2025-02-17

Updated

2026-02-23

Description by

CVSS 3.1

7.1

High

MetricsAV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Das U-Boot versions prior to 2025.01-rc1

Description The issue is related to an off-by-one error in the sqfs search dir function, which leads to heap memory corruption when listing SquashFS directories. This error occurs because the path separator is not considered in a size calculation.

Recommendations For versions prior to 2025.01-rc1, update to version 2025.01-rc1 or later to resolve the issue.

Exploitability

Exploit

Fix

Researchers

David Gstir

Richard Weinberger

Vendors

Affected products

Weakness enumeration

CWE-193: Off-by-one Error

Related identifiers