Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
sqfs_search_dir in Das U-Boot before 2025.01-rc1 exhibits an off-by-one error and resultant heap memory corruption for squashfs directory listing because the path separator is not considered in a size calculation.
CVSS Information
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H
Vulnerability Type
Off-by-one错误
Vulnerability Title
DENX Software Engineering Das U-Boot 安全漏洞
Vulnerability Description
DENX Software Engineering Das U-Boot是德国DENX Software Engineering公司的一个通用引导加载程序。 DENX Software Engineering Das U-Boot 2025.01-rc1之前版本存在安全漏洞，该漏洞源于在大小计算中未考虑路径分隔符，导致 squashfs 目录列表的堆内存损坏。
CVSS Information
N/A
Vulnerability Type
N/A