yocto ▾
›
kirkstone ▾
›
vulnerability
›
CVE-2022-33103
Component Overview
Vulnerability Overview
Name
CVE-2022-33103
Source
NVD (
link
)
Debian (
link
)
Description
Das U-Boot from v2020.10 to v2022.07-rc3 was discovered to contain an out-of-bounds write via the function sqfs_readdir().
CWEs
CWE-787
Published Date
Jul 1, 2022
Updated Date
Jun 17, 2026
Workaround
-
Advisories
Analysis
#
Affected Component
Analysis
u-boot
Exploitable
Vulnerability Ratings
#
7.8
CVSSv31
4.6
CVSSv2
Others affected components
#
Name
Project
Project Version
Version
Status
uboot-tools
buildroot
2025.02.x
2021.07
Exploitable
uboot-tools
buildroot
master
2026.04
Not Affected
u-boot
yocto
master
2026.04
Not Affected
u-boot
yocto
scarthgap
2024.01
Not Affected