CVE-2020-6070: f2fs-Tools Project f2fs-Tools

High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days.

An exploitable code execution vulnerability exists in the file system checking functionality of fsck.f2fs 1.12.0. A specially crafted f2fs file can cause a logic flaw and out-of-bounds heap operations, resulting in code execution. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

• f2fs-Tools Project f2fs-Tools: version 1.12.0 only
• Fedoraproject Fedora: version 33 only

Published 2020-08-10. Last modified 2026-06-17.