CVE-2012-4024

CVE-2012-4024 describes a stack-based buffer overflow vulnerability in the get_component function within unsquashfs.c, affecting Squashfs versions 4.2 and earlier. This flaw allows remote attackers to execute arbitrary code by providing a specially crafted list file (used with the -ef option). Rated with a CVSS score of 6.8 (Medium), successful exploitation requires medium attack complexity and could lead to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this vulnerability.