CVE-2024-57257: Denx U-Boot

Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days.

A stack consumption issue in sqfs_size in Das U-Boot before 2025.01-rc1 occurs via a crafted squashfs filesystem with deep symlink nesting.

Affected products

• Denx U-Boot: up to and including 2024.10

Published 2025-02-18. Last modified 2026-06-17.