High severity7.1NVD Advisory· Published Feb 18, 2025· Updated May 12, 2026
CVE-2024-57256
CVE-2024-57256
Description
An integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
1- Siemens Ruggedcom RoxCISA Alerts