CVE-2024-57254

Summary

CVE-2024-57254 is a newly disclosed vulnerability affecting Das U-Boot versions prior to 2025.01-rc1. It arises from an integer overflow issue in the function 'sqfs_inode_size' during the handling of symlink size calculations in a squashfs filesystem. This vulnerability can result in buffer overflows and potentially lead to arbitrary code execution, posing a significant risk to affected systems. Successful exploitation may allow an attacker to gain unauthorized access or control, leading to potential data theft or system compromise. It is recommended that users update to the latest version of U-Boot to mitigate this vulnerability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.