CVE-2026-71973 | U-Boot up to 2026.10-rc3 SquashFS Image sqfs_read_directory_table metablks_count integer overflow

A vulnerability was found in U-Boot up to 2026.10-rc3. It has been classified as critical. Impacted is the function sqfs_read_directory_table of the component SquashFS Image Handler. Performing a manipulation of the argument metablks_count results in integer overflow.

This vulnerability is identified as CVE-2026-71973. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More