CVE-2023-33551

The CVE-2023-33551 issue affects erofs-utils (v1.6 with the vulnerable erofsfsck_dirent_iter in fsck/main.c). It is a heap buffer overflow that allows remote code execution via a crafted erofs filesystem image. Public advisories indicate patches were released: Fedora backported a fix for this CVE...

CVE-2023-33552

The CVE-2023-33552 issue affects erofs-utils v1.6, with a Heap Buffer Overflow in erofs_read_one_data (data.c) that can allow arbitrary code execution via a crafted erofs filesystem image. Public references in connected sources confirm the flaw and that Fedora/Mageia advisories backported fixes t...