An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability.
The product incorrectly checks a return value from a function, which prevents it from detecting errors or exceptional conditions.
The product reads data past the end, or before the beginning, of the intended buffer.
| Link | Tags |
|---|---|
| https://talosintelligence.com/vulnerability_reports/TALOS-2020-1049 | exploit third party advisory technical description |
| https://security.gentoo.org/glsa/202101-26 | third party advisory vendor advisory |