libfsimage vulnerabilities

In the libfsimage iso9660 driver, the Rock Ridge CE record processing assumes a good size and offset without validation. An attacker can control these values on disk.

In the libfsimage iso9660 driver, the Rock Ridge NM record processing assumes a good entry length without validation. An attacker can control this value on disk.

In the libfsimage iso9660 driver, the Rock Ridge extension loop assumes a good inner record length without validation. An attacker can control this value on disk.

In the libfsimage iso9660 driver, the calculation of the System Use area may underflow. An attacker can control on-disk values leading to this error.

In the libfsimage iso9660 driver, the directory loop assumes a good record length without validation. An attacker can control this value on disk.