CVE-2023-33552

HighCVSS 7.8

Published: 01/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.71%

49th percentile - higher than 49% of all known CVEs

Summary

Heap buffer overflow in the erofs_read_one_data function in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

Risk Assessment

An attacker could exploit this vulnerability to execute arbitrary code remotely, posing a significant threat to the integrity and security of the system.

Recommendation

It is recommended to update erofs-utils to the latest version to mitigate this vulnerability and to monitor systems for unauthorized activities.

Other vulnerabilities in erofs-utils v1.6

CVE-2023-33551High
A heap buffer overflow in the erofsfsck_dirent_iter function in fsck/main.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

Original NVD description (English source)

Heap Buffer Overflow in the erofs_read_one_data function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS