https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:55:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-257671 EUVD-2026-257671 https://cve.radiocsirt.org/vuln/euvd-2026-257671 https://cve.radiocsirt.org/vuln/fkie_cve-2022-33967 <p>squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.</p> <p>squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-33967 https://cve.radiocsirt.org/vuln/ghsa-m6jw-rg4f-jw25 <p>squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.</p> <p>squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-m6jw-rg4f-jw25 https://cve.radiocsirt.org/vuln/gsd-2022-33967 gsd-2022-33967 https://cve.radiocsirt.org/vuln/gsd-2022-33967 https://cve.radiocsirt.org/vuln/jvndb-2022-002017 <p>U-Boot is a boot loader for multiple platforms, and squashfs filesystem feature is provided since v2020.10-rc2 (commit c5100613). squashfs filesystem implementation of U-Boot contains a heap-based buffer overflow vulnerability (CWE-122) due to a defect in the metadata reading process. Tatsuhiko Yasumatsu of Sony Corporation reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated between the reporter and the developer.</p> <p>U-Boot is a boot loader for multiple platforms, and squashfs filesystem feature is provided since v2020.10-rc2 (commit c5100613). squashfs filesystem implementation of U-Boot contains a heap-based buffer overflow vulnerability (CWE-122) due to a defect in the metadata reading process. Tatsuhiko Yasumatsu of Sony Corporation reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated between the reporter and the developer.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-002017 https://cve.radiocsirt.org/vuln/msrc_cve-2022-33967 msrc_CVE-2022-33967 https://cve.radiocsirt.org/vuln/msrc_cve-2022-33967 https://cve.radiocsirt.org/vuln/oesa-2022-1800 <p><strong>Affected:</strong> openEuler:22.03-LTS: uboot-tools</p> <p>This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot&#39;s environment. Security Fix(es): squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.(CVE-2022-33967)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS: uboot-tools</p> <p>This package includes the mkimage program, which allows generation of U-Boot images in various formats, and the fw_printenv and fw_setenv programs to read and modify U-Boot&#39;s environment. Security Fix(es): squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.(CVE-2022-33967)</p> https://cve.radiocsirt.org/vuln/oesa-2022-1800 https://cve.radiocsirt.org/vuln/suse-su-2022:2653-1 <p>Security update for u-boot</p> <p>Security update for u-boot</p> https://cve.radiocsirt.org/vuln/suse-su-2022:2653-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-33967 <p><strong>Affected:</strong> Ubuntu:16.04:LTS: u-boot, Ubuntu:18.04:LTS: u-boot, Ubuntu:20.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot</p> <p>squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.</p> <p><strong>Affected:</strong> Ubuntu:16.04:LTS: u-boot, Ubuntu:18.04:LTS: u-boot, Ubuntu:20.04:LTS: u-boot, Ubuntu:22.04:LTS: u-boot</p> <p>squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-33967