VDB
CVE-2022-33967
CVE-2022-33967
PUBLISHED
CVSS 6.599999904632568 MEDIUM
U-Boot is a boot loader for multiple platforms, and squashfs filesystem feature is provided since v2020.10-rc2 (commit c5100613). squashfs filesystem implementation of U-Boot contains a heap-based buffer overflow vulnerability (CWE-122) due to a defect in the metadata reading process. Tatsuhiko Yasumatsu of Sony Corporation reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated between the reporter and the developer.
EPSS 0.55% · 44.0th percentile
Risk Scores
CVSS 3.0
6.599999904632568
CVSS:3.0/AV:P/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
0.55%
44.0th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| DENX Software Engineering | U-Boot |
Timeline
- Jul 20, 2022 EPSS Score
- Jul 20, 2022 CVE Published
- Sep 5, 2022 EPSS Score
- Oct 22, 2022 EPSS Score
- Dec 8, 2022 EPSS Score
- Jan 24, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Mar 12, 2023 EPSS Score
- Apr 28, 2023 EPSS Score
- Jun 14, 2023 EPSS Score
- Aug 1, 2023 EPSS Score
- Sep 17, 2023 EPSS Score