In barebox before 2025.01.0, request2size in common/dlmalloc.c has an integer overflow, a related issue to CVE-2024-57258.
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2024-57261.json"