Threats tagged 'ghsa-5cmq-wrwp-9x26'

An integer overflow vulnerability exists in the sqfs_resolve_symlink function of Das U-Boot firmware versions before 2025.01-rc1. This flaw is triggered by a crafted squashfs filesystem with an inode size of 0xffffffff, causing a malloc call with zero size and leading to memory overwrite.