CVE-2020-6107: f2fs-Tools Project f2fs-Tools

Medium severity, CVSS 5.5. EPSS: 1.5% chance of exploitation in the next 30 days.

An exploitable information disclosure vulnerability exists in the dev_read functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause an uninitialized read resulting in an information disclosure. An attacker can provide a malicious file to trigger this vulnerability.

Affected products

• f2fs-Tools Project f2fs-Tools: before 1.14.0 (fixed in 1.14.0)

Published 2020-10-15. Last modified 2026-06-17.