buildroot ▾
›
2025.02.x ▾
›
vulnerability
›
CVE-2022-33103
Component Overview
Vulnerability Overview
Name
CVE-2022-33103
Source
NVD (
link
)
Debian (
link
)
Description
Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().
CWEs
CWE-787
Published Date
Jul 1, 2022
Updated Date
Jun 17, 2026
Workaround
-
Advisories
Analysis
#
Affected Component
Analysis
uboot-tools
Exploitable
Vulnerability Ratings
#
7.8
CVSSv31
4.6
CVSSv2
Others affected components
#
Name
Project
Project Version
Version
Status
uboot-tools
buildroot
master
2026.04
Not Affected
u-boot
yocto
kirkstone
2022.01
Exploitable
u-boot
yocto
master
2026.04
Not Affected
u-boot
yocto
scarthgap
2024.01
Not Affected