PT-2025-7462 · Squash4+5 · Squash4+5

Published

2025-01-01

·

Updated

2026-03-26

·

CVE-2025-0678

CVSS v3.1

7.8

High

VectorAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions squash4 (affected versions not specified)
Description The issue is related to an integer overflow that may cause a heap-based out-of-bounds write when reading data.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Memory Corruption

Buffer Overflow

Integer Overflow

Weakness Enumeration

Related Identifiers

ALT-PU-2025-5587
ALT-PU-2025-6088
AZL-57669
AZL-57703
BDU:2025-02244
CVE-2025-0678
OESA-2025-1216
OESA-2025-1217
OESA-2025-1218
OESA-2025-1291
OESA-2025-1292
OPENSUSE-SU-2025:14822-1
OPENSUSE-SU-2025_0586-1
OPENSUSE-SU-2025_0587-1
OPENSUSE-SU-2025_0588-1
OPENSUSE-SU-2025_0607-1
SUSE-SU-2025:01961-1
SUSE-SU-2025:0586-1
SUSE-SU-2025:0587-1
SUSE-SU-2025:0588-1
SUSE-SU-2025:0607-1
SUSE-SU-2025:0629-1
SUSE-SU-2025:20511-1
SUSE-SU-2025:20863-1
SUSE-SU-2025_0586-1
SUSE-SU-2025_0587-1
SUSE-SU-2025_0588-1
SUSE-SU-2025_0607-1
SUSE-SU-2025_0629-1

Affected Products

Alt Linux
Astra Linux
Debian
Red Os
Suse
Squash4