CVE-2012-4024: Stack-based buffer overflow in the get_component function in unsquashfs.c in unsquashfs in Squashfs 4.2 and...

Security readout for executives and security teams

CVE-2012-4024 is a memory corruption flaw in Squashfs unsquashfs. A crafted extraction list file could crash the tool or potentially run code where unsquashfs processes that file. Business risk is highest in automated firmware, image, or archive-processing pipelines that accept files from outside parties. Exposure is likely limited to systems running Squashfs 4.2 or earlier, especially squashfs-tools/unsquashfs workflows that process externally supplied extraction list files. Treat as a targeted hygiene item unless unsquashfs handles outside-supplied files. Prioritize remediation for build, malware-analysis, firmware, and support pipelines. Mitigation focus: Upgrade Squashfs or squashfs-tools using vendor distribution guidance.; Do not process untrusted -ef list files with unsquashfs.; Isolate automated image or firmware extraction pipelines from production systems..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.