What’s Vulnerable › Vulnerabilities

CVE-2024-57261

• Severity: high (CVSS 7.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-19 · updated 2026-06-17
• Weakness: CWE-190

Description

In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258.

Affected products

• barebox: before 2025.01.0 — fixed in 2025.01.0

How to fix

Upgrade to a fixed version: barebox 2025.01.0. Check the vendor advisory for mitigations.

References

• https://git.pengutronix.de/cgit/barebox/commit/?id=7cf25e0733f08f68d1bf0ca0c3cf6e2dfe51bd3c
• https://lists.infradead.org/pipermail/barebox/2024-November/048631.html

Get alerted when CVE-2024-57261 or the next vulnerability affects your stack