CVE-2026-124746 Busybox: out-of-bounds read in volume_id_get_buffer() via an offset+length wraparound

A flaw was found in BusyBox. An integer overflow occurs in the volumeid component when calculating buffer boundaries while probing filesystem metadata. An attacker can exploit this vulnerability by providing a specially crafted filesystem image on an attached storage device. When probed by...

CVE-2026-124746

A vulnerability exists in BusyBox where an integer overflow occurs in the volume_id component during filesystem metadata probing. The root cause is an offset+length wraparound during buffer boundary calculations in the volume_id_get_buffer() function. An attacker can exploit this by providing a s...