CVE-2022-33103: Denx U-Boot

High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days.

Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().

Affected products

• Denx U-Boot: from 2020.10, before 2022.07 (fixed in 2022.07); version 2022.07 only

Published 2022-07-01. Last modified 2026-06-17.