CVE-2012-4025

CVE-2012-4025 describes an integer overflow vulnerability in the queue_init function of unsquashfs in Squashfs 4.2 and earlier. This flaw allows remote attackers to execute arbitrary code by crafting a malicious .sqsh file, which can lead to a heap-based buffer overflow. The vulnerability has a CVSS score of 6.8, indicating a medium severity, and requires medium attack complexity with no authentication needed, potentially impacting confidentiality, integrity, and availability. While the EPSS score is low, suggesting a low likelihood of exploitation, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.