Launchpad.net

CVE 2023-33552

Heap Buffer Overflow in the erofs_read_one_data function at data.c in erofs-utils v1.6 allows remote attackers to execute arbitrary code via a crafted erofs filesystem image.

See the CVE page on Mitre.org for more details.