High severity7.5NVD Advisory· Published Apr 13, 2017· Updated May 13, 2026

CVE-2015-4646

Description

(1) unsquash-1.c, (2) unsquash-2.c, (3) unsquash-3.c, and (4) unsquash-4.c in Squashfs and sasquatch allow remote attackers to cause a denial of service (application crash) via a crafted input.

Affected products

Squashfs Project/Squashfs
cpe:2.3:a:squashfs_project:squashfs:*:*:*:*:*:*:*:*
Range: <=4.3

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

seclists.org/oss-sec/2015/q2/756nvdMailing ListThird Party AdvisoryVDB Entry
www.securityfocus.com/bid/75272nvdThird Party AdvisoryVDB Entry
github.com/plougher/squashfs-tools/commit/f95864afe8833fe3ad782d714b41378e860977b1nvdThird Party Advisory
security.gentoo.org/glsa/201701-73nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000