https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T21:39:06.360450+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-257671 EUVD-2026-257671 2026-10-02T21:39:06.514761+00:00 EUVD-2026-257671 https://cve.radiocsirt.org/vuln/fkie_cve-2022-33967 fkie_cve-2022-33967 2026-10-02T21:39:06.514797+00:00

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.

 https://cve.radiocsirt.org/vuln/ghsa-m6jw-rg4f-jw25 GHSA-m6jw-rg4f-jw25 2026-10-02T21:39:06.514832+00:00

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.

 https://cve.radiocsirt.org/vuln/gsd-2022-33967 gsd-2022-33967 2026-10-02T21:39:06.514850+00:00 gsd-2022-33967 https://cve.radiocsirt.org/vuln/jvndb-2022-002017 jvndb-2022-002017 2026-10-02T21:39:06.514863+00:00

U-Boot is a boot loader for multiple platforms, and squashfs filesystem feature is provided since v2020.10-rc2 (commit c5100613). squashfs filesystem implementation of U-Boot contains a heap-based buffer overflow vulnerability (CWE-122) due to a defect in the metadata reading process. Tatsuhiko Yasumatsu of Sony Corporation reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated between the reporter and the developer.

 https://cve.radiocsirt.org/vuln/msrc_cve-2022-33967 msrc_CVE-2022-33967 — squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer ov… 2026-10-02T21:39:06.514881+00:00 msrc_CVE-2022-33967 https://cve.radiocsirt.org/vuln/oesa-2022-1800 OESA-2022-1800 — uboot-tools security update 2026-10-02T21:39:06.514900+00:00

Affected: openEuler:22.03-LTS: uboot-tools

This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot's environment. Security Fix(es): squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.(CVE-2022-33967)

 https://cve.radiocsirt.org/vuln/suse-su-2022:2653-1 SUSE-SU-2022:2653-1 — Security update for u-boot 2026-10-02T21:39:06.514925+00:00

Security update for u-boot

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-33967 UBUNTU-CVE-2022-33967 2026-10-02T21:39:06.514942+00:00

Affected: Ubuntu:16.04:LTS: u-boot, Ubuntu:18.04:LTS: u-boot, Ubuntu:20.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot

squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.