CVE-2012-4025: Integer overflow in the queue_init function in unsquashfs.c in unsquashfs in Squashfs 4.2 and earlier allow...

Security readout for executives and security teams

CVE-2012-4025 affects unsquashfs, a tool used to unpack Squashfs filesystem images. A malicious .sqsh file can trigger memory corruption and potentially run attacker-controlled code when processed by vulnerable Squashfs 4.2 or earlier tooling. Exposure is most likely in build, firmware, appliance, malware-analysis, or distribution workflows that unpack untrusted Squashfs images. Ordinary systems are less exposed unless users or automated services run vulnerable unsquashfs on attacker-supplied .sqsh files. Treat as high priority where the organization processes third-party firmware, appliance images, or forensic samples. For general endpoints without Squashfs image handling, prioritize inventory and package hygiene over emergency response. Mitigation focus: Inventory Squashfs and unsquashfs versions in build, analysis, and firmware-processing environments.; Upgrade affected Squashfs packages using relevant vendor advisories or distribution updates.; Avoid processing untrusted .sqsh files with vulnerable unsquashfs versions..

Prepared

Jun 24, 2026, 12:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.