CVE-2024-57850

A flaw was found in the jffs2 component of the Linux kernel. The rtime decompression routine does not adequately check memory boundaries throughout the decompression process. This vulnerability allows a local attacker with low privileges to corrupt memory outside the intended buffer by providing specially crafted compressed data. Successful exploitation could lead to a denial of service or potentially arbitrary code execution.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.