CVE-2023-33552

Heap Buffer Overflow in the erofs_read_one_data function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

Score

CVSS 3.1 7.8 High

Status

Modified - cve@mitre.org

Published

2023-06-01

Last modified

2025-01-09

Weaknesses

CWE-787

Affected products

• Erofs-utils (Erofs-utils Project)

References

• https://github.com/lometsj/blog_repo/issues/1
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/FHOIRL6XH5NYR3LYI3KP5D…
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/IGGIYW7PHYQM2NPYCJPSPS…