CVE-2012-4025

EPSS 2.3%

Published: 7/19/2012Modified: 4/28/2026

Also known as:DEBIAN-CVE-2012-4025

Description

Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allows remote attackers to execute arbitrary code via a crafted block_log field in the superblock of a .sqsh file, leading to a heap-based buffer overflow.

Affected packages (1)

Debian/squashfs-toolsfrom 0, < 1:4.2+20121212-1

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2012-4025