Arbitrary Code Execution

sleuthkit is vulnerable to arbitrary code execution. A stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c allows an attacker to execute arbitrary code on the host OS...

CVE-2020-10232: Out-of-bounds Write

In version 4.8.0 and earlier of The Sleuth Kit TSK, there is a stack buffer overflow vulnerability in the YAFFS file timestamp parsing logic in yaffsfsistat in fs/yaffs.c...