CVE-2023-33551

HighCVSS 7.8

Published: 01/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.82%

52th percentile - higher than 52% of all known CVEs

Summary

A heap buffer overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute code, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to update erofs-utils to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in erofs-utils v1.6

CVE-2023-33552High
Heap buffer overflow in the erofs_read_one_data function in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

Original NVD description (English source)

Heap Buffer Overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS