SquashFS — Cyber Threats, Attacks & Incidents

Related Threat Clusters

• openSUSE ImageMagick and 7zip Vulnerabilities Lead to Denial of Service Risks

  On June 30, 2026, openSUSE released advisories for critical vulnerabilities in ImageMagick and 7zip. ImageMagick has multiple CVEs including CVE-2026-45031 and CVE-2026-46520, leading to Denial of Service due to…

  5 articles · Updated June 30, 2026
• Critical U-Boot Vulnerabilities Affect Ubuntu 24.04 LTS

  Ubuntu 24.04 LTS and its derivatives are affected by critical vulnerabilities in U-Boot, a boot loader for embedded systems. An attacker on the local network could exploit these issues to obtain sensitive memory…

  2 articles · Updated February 23, 2026
• Multiple CVEs Identified in Das U-Boot Affecting SquashFS and Ext4 Filesystems

  Six vulnerabilities have been identified in Das U-Boot, affecting its handling of squashfs and ext4 filesystems. These include integer overflows and stack consumption issues that could lead to memory overwrites and…

  9 articles · Updated February 18, 2026

Recent Intelligence Reports

• SUSE 7zip Important Information Disclosure Heap Overflow Vuln 2026-2696 — Linuxsecurity · June 30, 2026
• USN-8056-1: U — Ubuntu · February 23, 2026
• CVE-2022-33967 squashfs filesystem implementation of U-Boot versions from v2020.10-rc2 to v2022.07-rc5 contains a heap-based buffer overflow vulnerability due to a defect in the metadata reading process. Loading a specially crafted squashfs image may lead to a denial-of-service (DoS) condition or arbitrary code execution. — Api.Msrc.Microsoft · February 18, 2026
• CVE-2024-57255 An integer overflow in sqfs_resolve_symlink in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite. — Api.Msrc.Microsoft · February 18, 2026

Related Entities