barebox vulnerabilities

1 known vulnerability in barebox from Pengutronix. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  barebox: Integer Overflow or Wraparound

  CVE-2024-57262Feb 19, 2025Pengutronix

  In barebox before 2025.01.0, ext4fs_read_symlink has an integer overflow for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite, a related issue t