Das U-Boot Integer Overflow Vulnerability in Memory Allocation

A vulnerability allowing multiple integer overflows in the memory allocation process has been identified in Das U-Boot versions prior to 2025.01-rc1. This issue arises when handling a crafted SquashFS filesystem, particularly through the sbrk function, the request2size function, or due to improper management of ptrdiff_t on x86_64 architectures.

Impact

Exploitation of this vulnerability can lead to memory corruption, with potential consequences such as arbitrary code execution, especially in environments that utilize verified boot, where it could allow an attacker to bypass the chain of trust.

Remediation

Users are advised to upgrade to U-Boot version 2025.01-rc1 or later.