Squashfs-tools Project Squashfs-tools — known CVE vulnerabilities

Every CVE whose affected-product data names Squashfs-tools Project Squashfs-tools, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2021-40153 — CVSS 8.1 (high): squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to…
• CVE-2021-41072 — CVSS 8.1 (high): squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A…