Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.
CVSS Information
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
整数溢出或超界折返
Vulnerability Title
DENX Software Engineering Das U-Boot 安全漏洞
Vulnerability Description
DENX Software Engineering Das U-Boot是德国DENX Software Engineering公司的一个通用引导加载程序。 DENX Software Engineering Das U-Boot 2025.01-rc1之前版本存在安全漏洞，该漏洞源于ext4符号链接解析中的整数溢出，导致内存覆盖。
CVSS Information
N/A
Vulnerability Type
N/A